NETGEAR GSM7228PS-100NAS manual

350 East Plumeria Drive San Jose, CA 95134 USA November 2012 202-11054-02 1.0 ProSafe Managed Switch Command Line Interface (CLI) User Manual 10.0 GSM7328Sv2 GSM7352Sv2 GSM7228PS GSM7252PS M5300-28G3 M5300-52G3 M5300-28G-POE+ M5300-52G-POE+ M5300-28GF3 M5300-28G M5300-52G[...]

2 ProSafe Managed Switch © 2012 NETGEAR, Inc. All rights reserved. No part of this publication may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any language in any form or by any means without the written permission of NETGEAR, Inc. Technical Support Thank you for choosing NETGEAR. To register your prod[...]

3 Contents Chapter 1 Using the Command-Line Interface Licensing and Command Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Command Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Command Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

4 ProSafe Managed Switch Port-Channel/LAG (802.3ad) Commands . . . . . . . . . . . . . . . . . . . . . . . . 123 Port Mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139 Static MAC Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141 DHCP L2 Relay Agent[...]

5 ProSafe Managed Switch Chapter 6 IP Multicast Commands Multicast Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 339 DVMRP Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 344 PIM Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [...]

6 ProSafe Managed Switch System Utility and Clear Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . 562 Simple Network Time Protocol (SNTP) Commands . . . . . . . . . . . . . . . . . 572 DHCP Server Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 579 DNS Client Commands . . . . . . . . . . . . . . . .[...]

7 ProSafe Managed Switch Captive Portal Configuration Commands . . . . . . . . . . . . . . . . . . . . . . . . . 751 Captive Portal Status Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 757 Captive Portal Client Connection Commands . . . . . . . . . . . . . . . . . . . . . 761 Captive Portal Interface Commands . . . . . . . . [...]

8 1 1. Using the Command-Line Interface The command-line interface (CLI) is a text-based way to manage and monitor the system. You can access the CLI by using a direct serial connection or by using a remote logical connection with telnet or SSH. This chapter describes the CLI syntax, conventions, and modes. It contains the following sections: • L[...]

Using the Command-Line Interface 9 ProSafe Managed Switch Command Group or Command M5300-28G-POE+ M5300-52G-POE+ M5300-28G M5300-52G M5300-28G3 M5300-52G3 M5300-28GF3 GSM7328Sv2 GSM7352Sv2 GSM7228PS GSM7252PS Stacking Commands Supported Supported Supported Supported Supported Non-Stop Forwarding Commands Supported Supported Supported Supported Supp[...]

Using the Command-Line Interface 10 ProSafe Managed Switch Command Syntax A command is one or more words that might be followed by one or more parameters. Parameters can be required or optional values. Some commands, such as show network or clear vlan, do not require parameters. Other commands, such as network parms , require that you supply a valu[...]

Using the Command-Line Interface 11 ProSafe Managed Switch • [gateway] is an optional parameter, so you are not required to enter a value in place of the parameter. The New Template User Manual lists each command by the command name and provides a brief description of the command. Each command reference also contains the following information: ?[...]

Using the Command-Line Interface 12 ProSafe Managed Switch Name with Spaces” forces the system to accept the spaces. Empty strings (““) are not valid user-defined strings. Table 2 describes common parameter values and value formatting. Table 2. Parameter Descriptions a (32 bits) a.b (8.24 bits) a.b.c (8.8.16 bits) 0xn (CLI assumes hexadecimal[...]

Using the Command-Line Interface 13 ProSafe Managed Switch The port identifies the specific physical port or logical interface being managed on a given slot. Table 4. Type of Ports Note: In the CLI, loopback and tunnel interfaces do not use the unit/slot/port format. To specify a loopback interface, you use the loopback ID. To specify a tunnel inte[...]

Using the Command-Line Interface 14 ProSafe Managed Switch • Quality of Service • Management (CLI, Web UI, and SNMP) • IPv6 Management—Allows management of the device through an IPv6 through an IPv6 address without requiring the IPv6 Routing package in the system. The management address can be associated with the network port (front-panel s[...]

Using the Command-Line Interface 15 ProSafe Managed Switch Interface Config Switch (Interface <unit/slot/port>)# Switch (Interface Loopback <id>)# Switch (Interface Tunnel <id>)# Manages the operation of an interface and provides access to the router interface configuration commands. Use this mode to set up a physical port for a s[...]

Using the Command-Line Interface 16 ProSafe Managed Switch Table 6 explains how to enter or exit each mode. Table 6. CLI Mode Access and Exit Command Mode Access Method Exit or Access Previous Mode User EXEC This is the first level of access. To exit, enter logout . Privileged EXEC From the User EXEC mode, enter enable . To exit to the User EXEC mo[...]

Using the Command-Line Interface 17 ProSafe Managed Switch Command Completion and Abbreviation Command completion finishes spelling the command when you type enough letters of a command to uniquely identify the command keyword. Once you have entered enough letters, press the SPACEBAR or TAB key to complete the word. Command abbreviation allows you [...]

Using the Command-Line Interface 18 ProSafe Managed Switch CLI Error Messages If you enter a command and the system is unable to execute it, an error message appears. Table 7 describes the most common CLI error messages. Table 7. CLI Error Messages CLI Line-Editing Conventions Table 8 describes the key combinations you can use to edit commands or i[...]

Using the Command-Line Interface 19 ProSafe Managed Switch Using CLI Help Enter a question mark (?) at the command prompt to display the commands available in the current mode. (switch) >? enable Enter into user privilege mode. help Display help for various special keys. logout Exit this session. Any unsaved changes are lost. ping Send ICMP echo[...]

Using the Command-Line Interface 20 ProSafe Managed Switch You can also enter a question mark (?) after typing one or more characters of a word to list the available command or parameters that begin with the letters, as shown in the following example: (switch) #show m? mac-addr-table mac-address-table monitor Accessing the CLI You can access the CL[...]

21 2 2. Stacking Commands This chapter contains the following sections: • Dedicated Port Stacking • Stacking Commands • Non-Stop Forwarding Commands • Stack Firmware Synchronization Commands The commands in this chapter are in two functional groups: • Show commands display switch settings, statistics, and other information. • Configurat[...]

Stacking Commands 22 ProSafe Managed Switch supported switch types, indicating the type of the switch being preconfigured. The switch index is a 32-bit integer. This command is executed on the Primary Management Unit. Note: Switch index can be obtained by executing the show supported switchtype command in User EXEC mode. no member This command remo[...]

Stacking Commands 23 ProSafe Managed Switch Note: If the management unit is renumbered, then the running configuration is no longer applied (that is, the stack acts as if the configuration had been cleared). movemanagement This command moves the Primary Management Unit functionality from one switch to another. The < fromunit > is the switch i[...]

Stacking Commands 24 ProSafe Managed Switch Note: The Standby Management Unit cannot be the current Management Unit. The Standby unit should be a management-capable unit. slot This command configures a slot in the system. The <unit/slot> is the slot identifier of the slot. The < cardindex > is the index into the database of the supporte[...]

Stacking Commands 25 ProSafe Managed Switch to any module that is inserted into the slot. If a card is disabled, all the ports on the device are operationally disabled and shown as “unplugged” on management screens. no set slot disable This command unconfigures the administrative mode of the slot(s). If you specify [all] , the command removes t[...]

Stacking Commands 26 ProSafe Managed Switch reload (Stack) This command resets the entire stack or the identified <unit> . The <unit> is the switch identifier. The system prompts you to confirm that you want to reset the switch. show slot This command displays information about all the slots in the system or for a specific slot. If you [...]

Stacking Commands 27 ProSafe Managed Switch show supported cardtype This commands displays information about all card types or specific card types supported in the system. If you do not supply a value for <cardindex> , the following output appears: If you supply a value for <cardindex> , the following output appears: show switch This co[...]

Stacking Commands 28 ProSafe Managed Switch When you specify a value for <unit> , the following information appears: Plugged-In Model Identifier The model identifier of the switch in the stack. Model Identifier is a 32-character field assigned by the device manufacturer to identify the device. Switch Status The switch status. Possible values [...]

Stacking Commands 29 ProSafe Managed Switch show supported switchtype This commands displays information about all supported switch types or a specific switch type. • User EXEC • Privileged EXEC If you do not supply a value for <switchindex> , the following output appears: If you supply a value for <switchindex> , the following outp[...]

Stacking Commands 30 ProSafe Managed Switch show stack-port This command displays summary stack-port information for all interfaces. For Each Interface: show stack-port counters This command displays summary data counter information for all interfaces. Format show stack-port Mode Privileged EXEC Term Definition QOS Mode Stacking QOS Mode for all In[...]

Stacking Commands 31 ProSafe Managed Switch show stack-port diag This command shows stacking diagnostics for each port and is only intended for Field Application Engineers (FAEs) and developers. An FAE will advise on the necessity to run this command and capture this information. Non-Stop Forwarding Commands Non-stop forwarding allows the stack uni[...]

Stacking Commands 32 ProSafe Managed Switch no nsf This command disables non-stop forwarding on the stack. show nsf This command displays global and per-unit information on NSF configuration on the stack. Format nsf Mode Stack Global Config Format no nsf Mode Stack Global Config Format show nsf Mode Privileged EXEC Term Definition NSF Administrativ[...]

Stacking Commands 33 ProSafe Managed Switch Example: (Switch)#show nsf Administrative Status.......................... Enable Operational Status............................. Enable Last Startup Reason............................ Warm Auto-Restart Time Since Last Restart........................ 0 days 16 hrs 52 mins 55 secs Restart In Progress......[...]

Stacking Commands 34 ProSafe Managed Switch show checkpoint statistics Use this command to display general information about the checkpoint service operation. Example: (Switch)#show checkpoint statistics Messages Checkpointed.....................6708 Bytes Checkpointed........................894305 Time Since Counters Cleared...............3d 01:05[...]

Stacking Commands 35 ProSafe Managed Switch Stack Firmware Synchronization Commands Stack firmware synchronization provides an automatic mechanism to synchronize the firmware on stack members whose firmware version differs from the version running on the stack manager. This operation can result in either an upgrade or downgrade of firmware on the m[...]

Stacking Commands 36 ProSafe Managed Switch no boot auto-copy-sw This command disables stack firmware synchronization. boot auto-copy-sw trap This command sends SNMP traps related to stack firmware synchronization. no boot auto-copy-sw trap This command disables sending SNMP traps related to stack firmware synchronization. boot auto-copy-sw allow-d[...]

Stacking Commands 37 ProSafe Managed Switch show auto-copy-sw This command displays the stack firmware synchronization configuration status. Example: (Switch)#show auto-copy-sw Stack Firmware Synchronization Synchronization: Enabled SNMP Trap status: Enabled Allow Downgrade: Enabled Format show auto-copy-sw Mode Privileged EXEC[...]

38 3 3. Switching Commands This chapter describes the switching commands available in the managed switch CLI. This chapter contains the following sections: • Port Configuration Commands • Loopback Interface Commands • Spanning Tree Protocol (STP) Commands • VLAN Commands • Double VLAN Commands • Voice VLAN Commands • Provisioning (IEE[...]

Switching Commands 39 ProSafe Managed Switch • MLD Snooping Querier Commands • Port Security Commands • LLDP (802.1AB) Commands • LLDP-MED Commands • Denial of Service Commands • MAC Database Commands • ISDP Commands • Priority-Based Flow Control Commands The commands in this chapter are in three functional groups: • Show commands[...]

Switching Commands 40 ProSafe Managed Switch Note: The IP address cannot be assigned to a LAG virtual interface. The interface must be put under a VLAN group and an IP address assigned to the VLAN group. auto-negotiate This command enables automatic negotiation on a port. Default Format auto-negotiate Mode no auto-negotiate This command disables au[...]

Switching Commands 41 ProSafe Managed Switch description Use this command to create an alpha-numeric description of the port. Format description <description> Mode mtu Use the mtu command to set the maximum transmission unit (MTU) size, in bytes, for frames that ingress or egress the interface. You can use the mtu command to configure jumbo f[...]

Switching Commands 42 ProSafe Managed Switch no shutdown This command enables a port. Format no shutdown Mode shutdown all This command disables all ports. Note: You can use the shutdown all command on physical and port-channel (LAG) interfaces, but not on VLAN routing interfaces. no shutdown all This command enables all ports. Format no shutdown a[...]

Switching Commands 43 ProSafe Managed Switch speed all This command sets the speed and duplex setting for all interfaces. Format speed all [{auto}] [{<100 | 10 | 10G> {<half-duplex | full-duplex>}}] Mode 100h 100f 10h 10f 10Gh 10Gf show port This command displays port information. Format show port {<unit/slot/port> | all} Mode 10f[...]

Switching Commands 44 ProSafe Managed Switch show port protocol This command displays the Protocol-Based VLAN information for either the entire system, or for the indicated group. Format show port protocol {<groupid> | all} Mode show port description This command displays the port description for every port. Format show port description <u[...]

Switching Commands 45 ProSafe Managed Switch show port status This command displays the Protocol-Based VLAN information for either the entire system, or for the indicated group. Format show port status {<unit/slot/port> | all} Mode Interface Media Type STP Mode Physical Mode Physical Status Link Status Loop Status Partner Flow Control Loopbac[...]

Switching Commands 46 ProSafe Managed Switch no interface loopback This command removes the loopback interface and associated configuration parameters for the specified loopback interface. Format no interface loopback <loopback-id> Mode show interface loopback This command displays information about configured loopback interfaces. Format show[...]

Switching Commands 47 ProSafe Managed Switch Spanning Tree Protocol (STP) Commands This section describes the commands you use to configure Spanning Tree Protocol (STP). STP helps prevent network loops, duplicate messages, and network instability. spanning-tree This command sets the spanning-tree operational mode to enabled. Default Format spanning[...]

Switching Commands 48 ProSafe Managed Switch no spanning-tree bpdufilter Use this command to disable BPDU Filter on the interface or range of interfaces. Default Format no spanning-tree bpdufilter Mode spanning-tree bpdufilter default Use this command to enable BPDU Filter on all the edge port interfaces. Default Format spanning-tree bpdufilter Mod[...]

Switching Commands 49 ProSafe Managed Switch spanning-tree bpduguard Use this command to enable BPDU Guard on the switch. Default Format spanning-tree bpduguard Mode no spanning-tree bpduguard Use this command to disable BPDU Guard on the switch. Format no spanning-tree bpduguard Mode spanning-tree bpdumigrationcheck Use this command to force a tra[...]

Switching Commands 50 ProSafe Managed Switch spanning-tree configuration revision This command sets the Configuration Identifier Revision Level for use in identifying the configuration that this switch is currently using. The Configuration Identifier Revision Level is a number in the range of 0 to 65535. Default Format spanning-tree configuration r[...]

Switching Commands 51 ProSafe Managed Switch • Use 802.1s to specify that the switch transmits MST BPDUs (IEEE 802.1s functionality supported). • Use 802.1w to specify that the switch transmits RST BPDUs rather than MST BPDUs (IEEE 802.1w functionality supported). no spanning-tree forceversion This command sets the Force Protocol Version parame[...]

Switching Commands 52 ProSafe Managed Switch spanning-tree tcnguard This command enables the propagation of received topology change notifications and topology changes to other ports. Default Format spanning-tree tcnguard Mode no spanning-tree tcnguard This command disables the propagation of received topology change notifications and topology chan[...]

Switching Commands 53 ProSafe Managed Switch no spanning-tree max-hops This command sets the Bridge Max Hops parameter for the common and internal spanning tree to the default value. Format no spanning-tree max-hops Mode spanning-tree mst This command sets the Path Cost or Port Priority for this port within the multiple spanning tree instance or in[...]

Switching Commands 54 ProSafe Managed Switch If the you specify cost , this command sets the path cost for this port within a multiple spanning tree instance or the common and internal spanning tree instance, depending on the <mstid> parameter, to the default value, i.e. a path cost value based on the Link Speed. If you specify external-cost [...]

Switching Commands 55 ProSafe Managed Switch are masked according to the 802.1s specification. This causes the priority to be rounded down to the next lower valid priority. Default Format spanning-tree mst priority <mstid> <0-61440> Mode no spanning-tree mst priority This command sets the bridge priority for a specific multiple spanning[...]

Switching Commands 56 ProSafe Managed Switch spanning-tree port mode This command sets the Administrative Switch Port State for this port to enabled. Default Format spanning-tree port mode Mode no spanning-tree port mode This command sets the Administrative Switch Port State for this port to disabled. Format no spanning-tree port mode Mode spanning[...]

Switching Commands 57 ProSafe Managed Switch spanning-tree bpduforwarding Normally a switch will not forward Spanning Tree Protocol (STP) BPDU packets if STP is disabled. However, if in some network setup, the user wishes to forward BDPU packets received from other network devices, this command can be used to enable the forwarding. Default Format s[...]

Switching Commands 58 ProSafe Managed Switch show spanning-tree brief This command displays spanning tree settings for the bridge. The following information appears. Format show spanning-tree brief Mode • Privileged EXEC • User EXEC Bridge Priority Bridge Identifier Bridge Max Age Bridge Max Hops Bridge Hello Time Bridge Forward Delay Bridge Ho[...]

Switching Commands 59 ProSafe Managed Switch show spanning-tree interface This command displays the settings and parameters for a specific switch port within the common and internal spanning tree. The <unit/slot/port > is the desired switch port. The following details are displayed on execution of the command. Format show spanning-tree interf[...]

Switching Commands 60 ProSafe Managed Switch corresponds to the desired existing multiple spanning tree instance. The <unit/slot/port > is the desired switch port. Format show spanning-tree mst port detailed <mstid> <unit/slot/port> Mode • Privileged EXEC • User EXEC MST Instance ID Port Identifier Port Priority Port Forwardin[...]

Switching Commands 61 ProSafe Managed Switch tree. The <unit/slot/port > is the desired switch port. In this case, the following are displayed. Term Definition Port Identifier The port identifier for this port within the CST. Port Priority The priority of the port within the CST. Port Forwarding State The forwarding state of the port within t[...]

Switching Commands 62 ProSafe Managed Switch show spanning-tree mst port summary This command displays the settings of one or all ports within the specified multiple spanning tree instance. The parameter <mstid> indicates a particular MST instance. The parameter { <unit/slot/port > | all} indicates the desired switch port or all ports. [...]

Switching Commands 63 ProSafe Managed Switch show spanning-tree mst summary This command displays summary information about all multiple spanning tree instances in the switch. On execution, the following details are displayed. Format show spanning-tree mst summary Mode • Privileged EXEC • User EXEC MST Instance ID List For each MSTID: • Assoc[...]

Spanning Tree Adminmode Spanning Tree Version BPDU Guard Mode BPDU Filter Mode Configuration Name Configuration Revision Level Configuration Digest Key Configuration Format Selector MST Instances Switching Commands 64 ProSafe Managed Switch show spanning-tree vlan This command displays the association between a VLAN and a multiple spanning tree ins[...]

Switching Commands 65 ProSafe Managed Switch vlan database This command gives you access to the VLAN Config mode, which allows you to configure VLAN characteristics. Format vlan database Mode network mgmt_vlan This command configures the Management VLAN ID. Default Format network mgmt_vlan <1-4093> Mode no network mgmt_vlan This command sets [...]

Switching Commands 66 ProSafe Managed Switch vlan acceptframe This command sets the frame acceptance mode per interface. For VLAN Only mode, untagged frames or priority frames received on this interface are discarded. For Admit All mode, untagged frames or priority frames received on this interface are accepted and assigned the value of the interfa[...]

Switching Commands 67 ProSafe Managed Switch vlan makestatic This command changes a dynamically created VLAN (one that is created by GVRP registration) to a static VLAN (one that is permanently configured and defined). The ID is a valid VLAN identification number. VLAN range is 2-4093. Format vlan makestatic <2-4093> Mode vlan name This comma[...]

Switching Commands 68 ProSafe Managed Switch vlan participation all This command configures the degree of participation for all interfaces in a VLAN. The ID is a valid VLAN identification number. Format vlan participation all {exclude | include | auto} <1-4093> Mode You can use the following participation options: include exclude auto vlan po[...]

Switching Commands 69 ProSafe Managed Switch assigned the value of the interface VLAN ID for this port. With either option, VLAN tagged frames are forwarded in accordance with the IEEE 802.1Q VLAN Specification. Format no vlan port acceptframe all Mode vlan port ingressfilter all This command enables ingress filtering for all ports. If ingress filt[...]

Switching Commands 70 ProSafe Managed Switch vlan port tagging all This command configures the tagging behavior for all interfaces in a VLAN to enabled. If tagging is enabled, traffic is transmitted as tagged frames. If tagging is disabled, traffic is transmitted as untagged frames. The ID is a valid VLAN identification number. Format vlan port tag[...]

Switching Commands 71 ProSafe Managed Switch no vlan protocol group name This command removes the name from a protocol-based VLAN groups. Format no vlan protocol group name <1-128> Mode vlan protocol group add protocol This command adds the protocol to the protocol-based VLAN identified by groupid. A group may have more than one protocol asso[...]

Switching Commands 72 ProSafe Managed Switch no protocol group This command removes the <vlanid> from this protocol-based VLAN group that is identified by this <groupid> . Format no protocol group <groupid> <vlanid> Mode protocol vlan group This command adds the physical interface to the protocol-based VLAN identified by <[...]

Switching Commands 73 ProSafe Managed Switch no protocol vlan group all This command removes all interfaces from this protocol-based VLAN group that is identified by this <groupid> . Format no protocol vlan group all <groupid> Mode vlan pvid This command changes the VLAN ID per interface. Default Format vlan pvid <1-4093> Mode no [...]

Switching Commands 74 ProSafe Managed Switch vlan association subnet This command associates a VLAN to a specific IP-subnet. Format vlan association subnet <ipaddr> <netmask> <1-4093> Mode no vlan association subnet This command removes association of a specific IP-subnet to a VLAN. Format no vlan association subnet <ipaddr>[...]

Switching Commands 75 ProSafe Managed Switch show vlan <vlanid> This command displays detailed information, including interface information, for a specific VLAN. The ID is a valid VLAN identification number. Format show vlan <vlanid> Mode • Privileged EXEC • User EXEC VLAN ID VLAN Name VLAN Type Interface Current • Include - This [...]

Switching Commands 76 ProSafe Managed Switch show vlan brief This command displays a list of all configured VLANs. Format show vlan brief Mode • Privileged EXEC • User EXEC VLAN ID VLAN Name VLAN Type show vlan port This command displays VLAN port information. Format show vlan port {<unit/slot/port> | all} Mode • Privileged EXEC • Use[...]

Switching Commands 77 ProSafe Managed Switch show vlan association subnet This command displays the VLAN associated with a specific configured IP-Address and net mask. If no IP address and net mask are specified, the VLAN associations of all the configured IP-subnets are displayed. Format show vlan association subnet [<ipaddr> <netmask>[...]

Switching Commands 78 ProSafe Managed Switch dvlan-tunnel ethertype This command configures the ether-type for all interfaces. The ether-type may have the values of 802.1Q , vMAN , or custom . If the ether-type has a value of custom , the optional value of the custom ether type must be set to a value from 0 to 65535. Default Format dvlan-tunnel eth[...]

Switching Commands 79 ProSafe Managed Switch no mode dvlan-tunnel This command is used to disable Double VLAN Tunneling on the specified interface. By default, Double VLAN Tunneling is disabled. Format no mode dvlan-tunnel Mode show dot1q-tunnel Use this command without the optional parameters to display all interfaces enabled for Double VLAN Tunne[...]

Switching Commands 80 ProSafe Managed Switch Voice VLAN Commands This section describes the commands you use for Voice VLAN. Voice VLAN enables switch ports to carry voice traffic with defined priority so as to enable separation of voice and data traffic coming onto the port. The benefits of using Voice VLAN is to ensure that the sound quality of a[...]

Switching Commands 81 ProSafe Managed Switch You can configure Voice VLAN in any of the following ways: vlan-id dot1p none untagged no voice vlan (Interface Config) Use this command to disable the Voice VLAN capability on the interface. Format no voice vlan Mode voice vlan data priority Use this command to either trust or untrust the data traffic a[...]

Switching Commands 82 ProSafe Managed Switch When the interface is specified: Voice VLAN Interface Mode Voice VLAN ID Voice VLAN Priority Voice VLAN Untagged Voice VLAN CoS Override Voice VLAN Status . Provisioning (IEEE 802.1p) Commands This section describes the commands you use to configure provisioning, which allows you to prioritize ports. vla[...]

Switching Commands 83 ProSafe Managed Switch If an interface is configured as a protected port, and you add that interface to a Port Channel or Link Aggregation Group (LAG), the protected port status becomes operationally disabled on the interface, and the interface follows the configuration of the LAG port. However, the protected port configuratio[...]

Switching Commands 84 ProSafe Managed Switch no switchport protected (Interface Config) Use this command to configure a port as unprotected. The groupid parameter identifies the set of protected ports to which this interface is assigned. Format no switchport protected <groupid> Mode show switchport protected This command displays the status o[...]

Switching Commands 85 ProSafe Managed Switch Private Group Commands This section describes commands used to configure private group and view private group configuration information. Private group can be used to create a group of ports that can or can not share traffic to each others in the same VLAN group. The main application is to isolate a group[...]

Format Mode Switching Commands 86 ProSafe Managed Switch no private-group name This command is used to remove the specified private group. Format Mode show private-group This command displays the private groups’ information. Format Mode Private VLAN The Private VLANs feature separates a regular VLAN domain into two or more subdomains. Each subdom[...]

Switching Commands 87 ProSafe Managed Switch primary VLAN can be configured per private VLAN. All ports within a private VLAN share the same primary VLAN. • Isolated VLAN—A secondary VLAN that carries traffic from isolated ports to promiscuous ports. Only one isolated VLAN can be configured per private VLAN. • Community VLAN—A secondary VLA[...]

Switching Commands 88 ProSafe Managed Switch no switchport private-vlan This command is used to remove the private-VLAN association or mapping from the port. switchport mode private-vlan This command is used to configure a port as a promiscuous or host private VLAN port. Note that the properties of each mode can be configured even when the switch i[...]

Switching Commands 89 ProSafe Managed Switch no private-vlan This command is used to restore normal VLAN configuration. Format no private-vlan {association} Mode vlan Use this command to enter the private vlan configuration. The VLAN range is 1-4094. Format vlan < vlan-list > Mode show vlan This command displays information about the configur[...]

Switching Commands 90 ProSafe Managed Switch show interface ethernet <unit/slot/port> switchport This command displays the private-VLAN mapping information for the switch interfaces. Format show interface ethernet <unit/slot/port> switchport Mode • Privileged EXEC • User EXEC Private-vlan host-association Private-vlan mapping GARP C[...]

Switching Commands 91 ProSafe Managed Switch set garp timer leave This command sets the GVRP leave time for one port (Interface Config mode) or all ports (Global Config mode) and only has an effect when GVRP is enabled. Leave time is the time to wait after receiving an unregister request for a VLAN or a multicast group before deleting the VLAN entr[...]

Switching Commands 92 ProSafe Managed Switch show garp This command displays GARP information. Format show garp Mode • Privileged EXEC • User EXEC GMRP Admin Mode GVRP Admin Mode GVRP Commands This section describes the commands you use to configure and view GARP VLAN Registration Protocol (GVRP) information. GVRP-enabled switches exchange VLAN[...]

Switching Commands 93 ProSafe Managed Switch set gvrp interfacemode This command enables GVRP on a single port (Interface Config mode) or all ports (Global Config mode). Default Format set gvrp interfacemode Mode • Interface Config • Global Config no set gvrp interfacemode This command disables GVRP on a single port (Interface Config mode) or a[...]

Switching Commands 94 ProSafe Managed Switch GMRP Commands This section describes the commands you use to configure and view GARP Multicast Registration Protocol (GMRP) information. Like IGMP snooping, GMRP helps control the flooding of multicast packets. GMRP-enabled switches dynamically register and de-register group membership information with t[...]

Switching Commands 95 ProSafe Managed Switch is disabled on that interface. GARP functionality is subsequently re-enabled if routing is disabled and port-channel (LAG) membership is removed from an interface that has GARP enabled. Default Format set gmrp interfacemode Mode • Interface Config • Global Config no set gmrp interfacemode This comman[...]

Switching Commands 96 ProSafe Managed Switch show mac-address-table gmrp This command displays the GMRP entries in the Multicast Forwarding Database (MFDB) table. Format show mac-address-table gmrp Mode Mac Address Type Description Interfaces Port-Based Network Access Control Commands This section describes the commands you use to configure port-ba[...]

Switching Commands 97 ProSafe Managed Switch clear radius statistics This command is used to clear all RADIUS statistics. Format clear radius statistics Mode dot1x guest-vlan This command configures VLAN as guest vlan on a per port basis. The command specifies an active VLAN as an IEEE 802.1x guest VLAN. The range is 1 to the maximum VLAN ID suppor[...]

Switching Commands 98 ProSafe Managed Switch no dot1x mac-auth-bypass This command disables MAB for 802.1x-unaware clients. Format no dot1x mac-auth-bypass Mode dot1x max-req This command sets the maximum number of times the authenticator state machine on this port will transmit an EAPOL EAP Request/Identity frame before timing out the supplicant. [...]

Switching Commands 99 ProSafe Managed Switch dot1x port-control This command sets the authentication mode to use on the specified port. Select force-unauthorized to specify that the authenticator PAE unconditionally sets the controlled port to unauthorized. Select force-authorized to specify that the authenticator PAE unconditionally sets the contr[...]

Switching Commands 100 ProSafe Managed Switch dot1x re-authenticate This command begins the re-authentication sequence on the specified port. This command is only valid if the control mode for the specified port is “auto” or “mac-based”. If the control mode is not “auto” or “mac-based”, an error will be returned. Format dot1x re-aut[...]

Switching Commands 101 ProSafe Managed Switch dot1x timeout This command sets the value, in seconds, of the timer used by the authenticator state machine on this port. Depending on the token used and the value (in seconds) passed, various timeout configurable parameters are set. The following tokens are supported: guest-vlan-period reauth-period qu[...]

Switching Commands 102 ProSafe Managed Switch dot1x unauthenticated-vlan Use this command to configure the unauthenticated VLAN associated with that port. The unauthenticated VLAN ID can be a valid VLAN ID from 0-Maximum supported VLAN ID (4093 for 7000 series). The unauthenticated VLAN must be statically configured in the VLAN database to be opera[...]

Switching Commands 103 ProSafe Managed Switch dot1x dynamic-vlan enable Use this command to enable the switch to create VLANs dynamically when a RADIUS assigned VLAN does not exist in the switch. Format dot1x dynamic-vlan enable Mode Default no dot1x dynamic-vlan enable Use this command to disable the switch from creating VLANs dynamically when a R[...]

Switching Commands 104 ProSafe Managed Switch show authentication methods This command displays information about the authentication methods. Format show authentication methods Mode The following is an example of this command: Login Authentication Method Lists ________________________________ Console_Default: None Network_Default:Local Enable Authe[...]

Switching Commands 105 ProSafe Managed Switch configuration for a specified port and the dot1x statistics for a specified port - depending on the tokens used. Format show dot1x [{summary {<unit/slot/port> | all} | detail <unit/slot/port> | statistics <unit/slot/port>] Mode If you do not use the optional parameters <unit/slot/po[...]

Switching Commands 106 ProSafe Managed Switch Control Mode The configured control mode for this port. Possible values are force-unauthorized | force-authorized | auto | mac-based. Authenticator PAE State Current state of the authenticator PAE state machine. Possible values are Initialize, Disconnected, Connecting, Authenticating, Authenticated, Abo[...]

Switching Commands 107 ProSafe Managed Switch The show dot1x detail <unit/slot/port> command will display the following MAC-based dot1x fields if the port-control mode for that specific port is MAC-based. For each client authenticated on the port, the show dot1x detail <unit/slot/port> command will display the following MAC-based dot1x [...]

Switching Commands 108 ProSafe Managed Switch show dot1x clients This command displays 802.1x client information. This command also displays information about the number of clients that are authenticated using Monitor mode and using 802.1X. Format show dot1x clients { <unit/slot/port> | all} Mode EAPOL Logoff Frames Received The number of EAP[...]

Switching Commands 109 ProSafe Managed Switch show dot1x users This command displays 802.1x port security user information for locally configured users. Format show dot1x users <unit/slot/port> Mode Users 802.1X Supplicant Commands 802.1X (“dot1x”) supplicant functionality is on point-to-point ports. The administrator can configure the us[...]

Switching Commands 110 ProSafe Managed Switch dot1x pae Use this command to set the port’s dot1x role. The port can serve as either a supplicant or an authenticator. Format dot1x pae {supplicant | authenticator} Mode dot1x supplicant port-control Use this command to set the ports authorization state (Authorized or Unauthorized) either manually or[...]

Switching Commands 111 ProSafe Managed Switch no dot1x supplicant max-start Use this command to set the max-start value to the default. Format no dot1x supplicant max-start Mode dot1x supplicant timeout start-period Use this command to configure the start period timer interval to wait for the EAP identity request from the authenticator. Default For[...]

Switching Commands 112 ProSafe Managed Switch dot1x supplicant timeout auth-period Use this command to configure the authentication period timer interval to wait for the next EAP request challenge from the authenticator. Default Format dot1x supplicant timeout auth-period < 1-65535 seconds > Mode no dot1x supplicant timeout auth-period Use th[...]

Switching Commands 113 ProSafe Managed Switch maintains the configured “level” (to be active the next time that form of storm-control is enabled.) Note: The actual rate of ingress traffic required to activate storm-control is based on the size of incoming packets and the hard-coded average packet size of 512 bytes - used to calculate a packet-p[...]

Switching Commands 114 ProSafe Managed Switch no storm-control broadcast level This command sets the broadcast storm recovery threshold to the default value for an interface and disables broadcast storm recovery. Format no storm-control broadcast level Mode storm-control broadcast rate Use this command to configure the broadcast storm recovery thre[...]

Switching Commands 115 ProSafe Managed Switch storm-control broadcast level (Global) This command configures the broadcast storm recovery threshold for all interfaces as a percentage of link speed and enables broadcast storm recovery. If the mode is enabled, broadcast storm recovery is active, and if the rate of L2 broadcast traffic ingressing on a[...]

Switching Commands 116 ProSafe Managed Switch an interface increases beyond the configured threshold, the traffic will be dropped. Therefore, the rate of multicast traffic will be limited to the configured threshold. Default Format storm-control multicast Mode no storm-control multicast This command disables multicast storm recovery mode for an int[...]

Switching Commands 117 ProSafe Managed Switch no storm-control multicast rate This command sets the multicast storm recovery threshold to the default value for an interface and disables multicast storm recovery. Format no storm-control multicast rate Mode storm-control multicast (Global) This command enables multicast storm recovery mode for all in[...]

Switching Commands 118 ProSafe Managed Switch no storm-control multicast level This command sets the multicast storm recovery threshold to the default value for all interfaces and disables multicast storm recovery. Format no storm-control multicast level Mode storm-control multicast rate (Global) Use this command to configure the multicast storm re[...]

Switching Commands 119 ProSafe Managed Switch no storm-control unicast This command disables unicast storm recovery mode for an interface. Format no storm-control unicast Mode storm-control unicast level This command configures the unicast storm recovery threshold for an interface as a percentage of link speed, and enables unicast storm recovery. I[...]

Switching Commands 120 ProSafe Managed Switch no storm-control unicast rate This command sets the unicast storm recovery threshold to the default value for an interface and disables unicast storm recovery. Format no storm-control unicast rate Mode storm-control unicast (Global) This command enables unicast storm recovery mode for all interfaces. If[...]

Switching Commands 121 ProSafe Managed Switch no storm-control unicast level This command sets the unicast storm recovery threshold to the default value and disables unicast storm recovery for all interfaces. Format no storm-control unicast level Mode storm-control unicast rate (Global) Use this command to configure the unicast storm recovery thres[...]

Switching Commands 122 ProSafe Managed Switch Use the all keyword to display the per-port configuration parameters for all interfaces, or specify the unit/slot/port to display information about a specific interface. Format show storm-control [all | <unit/slot/port>] Mode Bcast Mode Bcast Level Mcast Mode Mcast Level Ucast Mode Ucast Level Flo[...]

Switching Commands 123 ProSafe Managed Switch no flowcontrol Format no flowcontrol Mode • Global Config • Interface Config show flowcontrol Use this command to display the IEEE 802.3 Annex 31B flow control settings and status for a specific interface or all interfaces. It also displays 802.3 Tx and Rx pause counts. Priority Flow Control frames [...]

Switching Commands 124 ProSafe Managed Switch A port-channel (LAG) interface can be either static or dynamic, but not both. All members of a port channel must participate in the same protocols.) A static port-channel interface does not require a partner system to be able to aggregate its member ports. Note: If you configure the maximum number of dy[...]

Switching Commands 125 ProSafe Managed Switch lacp admin key Use this command to configure the administrative value of the key for the port-channel. The value range of < key > is 0 to 65535. Default Format lacp admin key < key > Mode Note: This command is only applicable to port-channel interfaces. no lacp admin key Use this command to [...]

Switching Commands 126 ProSafe Managed Switch lacp actor admin key Use this command to configure the administrative value of the LACP actor admin key. The valid range for < key > is 0-65535. Default Format lacp actor admin key < key > Mode Note: This command is only applicable to physical interfaces. no lacp actor admin key Use this com[...]

Switching Commands 127 ProSafe Managed Switch Note: This command is only applicable to physical interfaces. no lacp actor admin state longtimeout Use this command to set the LACP actor admin state to short timeout. Format no lacp actor admin state longtimeout Mode Note: This command is only applicable to physical interfaces. lacp actor admin state [...]

Switching Commands 128 ProSafe Managed Switch no lacp actor port priority Use this command to configure the default priority value assigned to the Aggregation Port. Format no lacp actor port priority Mode lacp actor system priority Use this command to configure the priority value associated with the LACP Actor’s SystemID. The range for < prior[...]

Switching Commands 129 ProSafe Managed Switch no lacp partner admin key Use this command to configure the administrative value of the Key for the protocol partner. Format no lacp partner admin key < key > Mode lacp partner admin state individual Use this command to set LACP partner admin state to individual. Format lacp partner admin state in[...]

Switching Commands 130 ProSafe Managed Switch lacp partner admin state passive Use this command to set the LACP partner admin state to passive. Format lacp partner admin state passive Mode Note: This command is only applicable to physical interfaces. no lacp partner admin state passive Use this command to set the LACP partner admin state to active.[...]

Switching Commands 131 ProSafe Managed Switch Note: This command is only applicable to physical interfaces. no lacp partner port priority Use this command to configure the default LACP partner port priority. Format no lacp partner port priority Mode lacp partner system id Use this command to configure the 6-octet MAC Address value representing the [...]

Switching Commands 132 ProSafe Managed Switch Note: This command is applicable only to physical interfaces. no lacp partner system priority Use this command to configure the default administrative value of priority associated with the Partner’s System ID. Format no lacp partner system priority Mode port-channel local-preference This command enabl[...]

Switching Commands 133 ProSafe Managed Switch no port-channel static This command sets the static mode on a particular port-channel (LAG) interface to the default value. This command will be executed only for interfaces of type port-channel (LAG). Format no port-channel static Mode port lacpmode This command enables Link Aggregation Control Protoco[...]

Switching Commands 134 ProSafe Managed Switch no port lacptimeout This command sets the timeout back to its default value on a physical interface of a particular device type ( actor or partner ). Format no port lacptimeout {actor | partner} Mode port lacptimeout (Global Config) This command sets the timeout for all interfaces of a particular device[...]

Switching Commands 135 ProSafe Managed Switch port-channel linktrap This command enables link trap notifications for the port-channel (LAG). The interface is a logical unit/slot/port for a configured port-channel. The option all enables link trap notifications for all the configured port-channels. Default Format port-channel linktrap {<unit/slot[...]

1 2 3 4 5 6 7 <unit/slot/port>| all Switching Commands 136 ProSafe Managed Switch no port-channel load-balance This command reverts to the default load balancing configuration. port-channel name This command defines a name for the port-channel (LAG). The interface is a logical unit/slot/port for a configured port-channel, and <name> is [...]

Switching Commands 137 ProSafe Managed Switch port-channel system priority Use this command to configure port-channel system priority. The valid range of <priority> is 0-65535. Default Format port-channel system priority < priority > Mode no port-channel system priority Use this command to configure the default port-channel system prior[...]

Switching Commands 138 ProSafe Managed Switch The following output parameters are displayed. System Priority System ID Admin Key Port Priority Port-ID Admin State show port-channel brief This command displays the static capability of all port-channel (LAG) interfaces on the device as well as a summary of individual port-channel interfaces. Format s[...]

Logical Interface Port-Channel Name Link State Admin Mode Type • Static - The port-channel is statically maintained. • Dynamic - The port-channel is dynamically maintained. Mbr Ports Device Timeout Port Speed Ports Active Load Balance Option Local Preference Mode Switching Commands 139 ProSafe Managed Switch show port-channel system priority Us[...]

Switching Commands 140 ProSafe Managed Switch specify the interface to receive the monitored traffic. Use the mode parameter to enabled the administrative mode of the session. If enabled, the probe port monitors all the traffic received and transmitted on the physical monitored port. Format monitor session <session-id> {source interface <u[...]

Switching Commands 141 ProSafe Managed Switch show monitor session This command displays the Port monitoring information for a particular mirroring session. Note: The <session-id> parameter is an integer value used to identify the session. In the current version of the software, the <session-id> parameter is always one (1) Static MAC Fi[...]

Switching Commands 142 ProSafe Managed Switch • For multicast MAC address filters with destination ports configured, the maximum number of static filters supported is 256. For example, for current platforms you can configure the following combinations: • Unicast MAC and source port (max = 20) • Multicast MAC and source port (max=20) • Multi[...]

Switching Commands 143 ProSafe Managed Switch 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The <vlanid> parameter must identify a valid VLAN. Format no macfilter adddest < macaddr > <vlanid> Mode macfilter adddest all This command adds all interfaces to the destination filter set for the MAC filter with the given [...]

Switching Commands 144 ProSafe Managed Switch specified as a 6-byte hexadecimal number in the format of b1:b2:b3:b4:b5:b6. The <vlanid> parameter must identify a valid VLAN. Format no macfilter addsrc <macaddr> <vlanid> Mode macfilter addsrc all This command adds all interfaces to the source filter set for the MAC filter with the [...]

Switching Commands 145 ProSafe Managed Switch Note: Only multicast address filters will have destination port lists. show mac-address-table staticfiltering This command displays the Static Filtering entries in the Multicast Forwarding Database (MFDB) table. Format show mac-address-table staticfiltering Mode Mac Address Type Description Interfaces D[...]

Switching Commands 146 ProSafe Managed Switch no dhcp l2relay Use this command to disable the DHCP Layer 2 relay agent for an interface or range of interfaces. Format no dhcp l2relay Modes • Global Config • Interface Config dhcp l2relay circuit-id vlan Use this parameter to set the DHCP Option-82 Circuit ID for a VLAN. When enabled, the interfa[...]

Switching Commands 147 ProSafe Managed Switch dhcp l2relay vlan Use this command to enable the DHCP L2 Relay agent for a set of VLANs. All DHCP packets which arrive on interfaces in the configured VLAN are subject to L2 Relay processing. vlan–list range is 1–4093. Separate non-consecutive IDs with a comma (,), and do not insert spaces or zeros [...]

Switching Commands 148 ProSafe Managed Switch 0/2 Enabled untrusted 0/4 Disabled trusted VLAN Id L2 Relay CircuitId RemoteId --------- ---------- ----------- ------------ 3 Disabled Enabled --NULL— 5 Enabled Enabled --NULL— 6 Enabled Enabled netgear 7 Enabled Disabled --NULL— 8 Enabled Disabled --NULL— 9 Enabled Disabled --NULL— 10 Enable[...]

Switching Commands 149 ProSafe Managed Switch show dhcp l2relay agent-option vlan Use this command to display the DHCP L2 Relay Option-82 configuration specific to VLAN. Format show dhcp l2relay agent-option vlan vlan-range Mode Example: The following shows example CLI display output for the command. (switch) #show dhcp l2relay agent-option vlan 5-[...]

Switching Commands 150 ProSafe Managed Switch dhcp client vendor-id-option-string Use this command to set the DHCP Vendor Option-60 string to be included in requests transmitted to the DHCP server by the DHCP client operating in the switch. Format dhcp client vendor-id-option-string <string> Mode no dhcp client vendor-id-option-string Use thi[...]

Switching Commands 151 ProSafe Managed Switch no ip dhcp snooping Use this command to disable DHCP Snooping globally. Format no ip dhcp snooping Mode ip dhcp snooping vlan Use this command to enable DHCP Snooping on a list of comma-separated VLAN ranges. Default Format ip dhcp snooping vlan < vlan-list > Mode no ip dhcp snooping vlan Use this[...]

Switching Commands 152 ProSafe Managed Switch ip dhcp snooping database Use this command to configure the persistent location of the DHCP Snooping database. This can be local or a remote file on a given IP machine. Default Format ip dhcp snooping database {local|tftp://hostIP/filename} Mode ip dhcp snooping database write-delay Use this command to [...]

Switching Commands 153 ProSafe Managed Switch ip verify binding Use this command to configure static IP source guard (IPSG) entries. Format ip verify binding < mac-address > vlan < vlan id > < ip address > interface < interface id > Mode no ip verify binding Use this command to remove the IPSG static entry from the IPSG data[...]

Switching Commands 154 ProSafe Managed Switch no ip dhcp snooping log-invalid Use this command to disable the logging DHCP messages filtration by the DHCP Snooping application. Format no ip dhcp snooping log-invalid Mode ip dhcp snooping trust Use this command to configure the port as trusted. Default Format ip dhcp snooping trust Mode no ip dhcp s[...]

Switching Commands 155 ProSafe Managed Switch show ip dhcp snooping Use this command to display the DHCP Snooping global configurations and per port configurations. Format show ip dhcp snooping Mode • Privileged EXEC • User EXEC Example: The following shows example CLI display output for the command. (switch) #show ip dhcp snooping DHCP snoopin[...]

Switching Commands 156 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (switch) #show ip dhcp snooping binding Total number of bindings: 2 MAC Address IP Address VLAN Interface Type Lease (Secs) ------------------ ------------ ---- --------- ---- ------------- 00:02:B3:06:60:80 210.1.1.3 10 0/1 86400 [...]

Switching Commands 157 ProSafe Managed Switch show ip dhcp snooping interfaces Use this command to show the DHCP Snooping status of the interfaces. Format show ip dhcp snooping interfaces Mode show ip dhcp snooping statistics Use this command to list statistics for DHCP Snooping security violations on untrusted ports. Format show ip dhcp snooping s[...]

Switching Commands 158 ProSafe Managed Switch 1/0/20 0 0 0 clear ip dhcp snooping binding Use this command to clear all DHCP Snooping bindings on all interfaces or on a specific interface. Format clear ip dhcp snooping binding [interface < unit/slot/port >] Mode • Privileged EXEC • User EXEC clear ip dhcp snooping statistics Use this comm[...]

Switching Commands 159 ProSafe Managed Switch 0/1 ip-mac 210.1.1.3 00:02:B3:06:60:80 10 0/1 ip-mac 210.1.1.4 00:0F:FE:00:13:04 10 show ip source binding This command displays the IPSG bindings. Format show ip source binding [{static/dynamic}] [interface unit/slot/port ] [ vlan id ] Mode • Privileged EXEC • User EXEC The following shows sample C[...]

Switching Commands 160 ProSafe Managed Switch ip arp inspection vlan Use this command to enable Dynamic ARP Inspection on a list of comma-separated VLAN ranges. Default disabled Format ip arp inspection vlan vlan-list Mode no ip arp inspection vlan Use this command to disable Dynamic ARP Inspection on a list of comma-separated VLAN ranges. Format n[...]

Switching Commands 161 ProSafe Managed Switch no ip arp inspection vlan logging Use this command to disable logging of invalid ARP packets on a list of comma-separated VLAN ranges. Format no ip arp inspection vlan vlan-list logging Mode ip arp inspection trust Use this command to configure an interface as trusted for Dynamic ARP Inspection. Default[...]

Switching Commands 162 ProSafe Managed Switch no ip arp inspection limit Use this command to set the rate limit and burst interval values for an interface to the default values of 15 pps and 1 second, respectively. Format no ip arp inspection limit Mode ip arp inspection filter Use this command to configure the ARP ACL used to filter invalid ARP pa[...]

Switching Commands 163 ProSafe Managed Switch permit ip host mac host Use this command to configure a rule for a valid IP address and MAC address combination used in ARP packet validation. Format permit ip host sender-ip mac host sender-mac Mode no permit ip host mac host Use this command to delete a rule for a valid IP and MAC combination. Format [...]

Switching Commands 164 ProSafe Managed Switch Source Mac Validation : Disabled Destination Mac Validation : Disabled IP Address Validation : Disabled Vlan Configuration Log Invalid ACL Name Static flag ---- ------------- ----------- --------- ---------- 10 Enabled Enabled H2 Enabled 11 Disabled Enabled 12 Enabled Disabled show ip arp inspection sta[...]

Switching Commands 165 ProSafe Managed Switch VLAN DHCP ACL DHCP ACL Bad Src Bad Dest Invalid Drops Drops Permits Permits MAC MAC IP ----- -------- --------- ----------- --------- ---------- ----------- --------- 10 11 1 65 25 1 1 0 20 1 0 8 2 0 1 1 clear ip arp inspection statistics Use this command to reset the statistics for Dynamic ARP Inspecti[...]

Switching Commands 166 ProSafe Managed Switch show arp access-list Use this command to display the configured ARP ACLs with the rules. Giving an ARP ACL name as the argument will display only the rules in that ARP ACL. Format show arp access-list [ acl-name ] Mode • Privileged EXEC • User EXEC Example: The following shows example CLI display ou[...]

Switching Commands 167 ProSafe Managed Switch • Flooding of unregistered multicast data packets to all ports in the VLAN. Default Format set igmp Mode • Global Config • Interface Config Format set igmp <vlanid> Mode no set igmp This command disables IGMP Snooping on the system, an interface or a VLAN. Format no set igmp Mode • Global [...]

Switching Commands 168 ProSafe Managed Switch LAN interface from its forwarding table entry upon receiving an IGMP leave message for that multicast group without first sending out MAC-based general queries to the interface. You should enable fast-leave admin mode only on VLANs where only one host is connected to each layer 2 LAN port. This prevents[...]

Switching Commands 169 ProSafe Managed Switch no set igmp groupmembership-interval This command sets the IGMPv3 Group Membership Interval time to the default value. Format no set igmp groupmembership-interval Mode • Interface Config • Global Config Format no set igmp groupmembership-interval <vlan_id> Mode set igmp maxresponse This comman[...]

Switching Commands 170 ProSafe Managed Switch interfaces with multicast routers attached. The range is 0 to 3600 seconds. A value of 0 indicates an infinite time-out, i.e. no expiration. Default Format set igmp mcrtrexpiretime <0-3600> Mode • Global Config • Interface Config Format set igmp mcrtrexpiretime <vlan_id> <0-3600> M[...]

Switching Commands 171 ProSafe Managed Switch set igmp mrouter interface This command configures the interface as a multicast router interface. When configured as a multicast router interface, the interface is treated as a multicast router interface in all VLANs. Default Format set igmp mrouter interface Mode no set igmp mrouter interface This comm[...]

Switching Commands 172 ProSafe Managed Switch IGMPv3 - TTL, ToS, and Router Alert fields are validated  no set igmp header-validation This command disables the header validation for IGMP packets. Format no set igmp header-validation Mode mac address-table multicast forbidden-unregistered vlan Use this command to forbid forwarding unregistered mu[...]

Switching Commands 173 ProSafe Managed Switch mac address-table multicast forward-all vlan Use this command to enable forwarding of all multicast packets on a given VLAN ID. Format mac address-table multicast forward-all vlan < 1-4093 > Mode no mac address-table multicast forward-all vlan This command to restores the system default. Format no[...]

Switching Commands 174 ProSafe Managed Switch show igmpsnooping This command displays IGMP Snooping information. Configured information is displayed whether or not IGMP Snooping is enabled. Format show igmpsnooping [<unit/slot/port> | <vlan_id>] Mode When the optional arguments <unit/slot/port > or <vlan_id> are not used, th[...]

Switching Commands 175 ProSafe Managed Switch When you specify a value for <vlan_id> , the following information appears: VLAN ID IGMP Snooping Admin Mode Fast Leave Mode Group Membership Interval Maximum Response Time Multicast Router Expiry Time show igmpsnooping mrouter interface This command displays information about statically configure[...]

Switching Commands 176 ProSafe Managed Switch show mac-address-table igmpsnooping This command displays the IGMP Snooping entries in the MFDB table. Format show mac-address-table igmpsnooping Mode show mac address-table multicast filtering Use this command to display the multicast filtering details for a given VLAN. Format show mac address-table mu[...]

Switching Commands 177 ProSafe Managed Switch IGMP Snooping Querier Commands IGMP Snooping requires that one central switch or router periodically query all end-devices on the network to announce their multicast memberships. This central device is the “IGMP Querier”. The IGMP query responses, known as IGMP reports, keep the switch updated with [...]

Switching Commands 178 ProSafe Managed Switch set igmp querier query-interval Use this command to set the IGMP Querier Query Interval time. It is the amount of time in seconds that the switch waits before sending another general query. Default Format set igmp querier query-interval < 1-18000 > Mode no set igmp querier query-interval Use this [...]

Switching Commands 179 ProSafe Managed Switch no set igmp querier version Use this command to set the IGMP Querier version to its default value. Format no set igmp querier version Mode set igmp querier election participate Use this command to enable the Snooping Querier to participate in the Querier Election process when it discovers the presence o[...]

Switching Commands 180 ProSafe Managed Switch When you specify a value for < vlanid >, the following additional information appears. VLAN Admin Mode VLAN Operational State VLAN Operational Max Response Time Querier Election Participation Querier VLAN Address Operational Version Last Querier Address Last Querier Version When the optional argum[...]

Switching Commands 181 ProSafe Managed Switch set mld Use this command to enable MLD Snooping on the system (Global Config Mode) or an Interface (Interface Config Mode). This command also enables MLD Snooping on a particular VLAN and enables MLD Snooping on all interfaces participating in a VLAN. If an interface has MLD Snooping enabled and you ena[...]

Switching Commands 182 ProSafe Managed Switch no set mld interfacemode Use this command to disable MLD Snooping on all interfaces. Format no set mld interfacemode Mode set mld fast-leave Use this command to enable MLD Snooping fast-leave admin mode on a selected interface or VLAN. Enabling fast-leave allows the switch to immediately remove the Laye[...]

Switching Commands 183 ProSafe Managed Switch interface from the entry. This value must be greater than the MLDv2 Maximum Response time value. The range is 2 to 3600 seconds. Default Format set mld groupmembership-interval vlanid 2-3600 Mode • Interface Config • Global Config • VLAN Mode no set groupmembership-interval Use this command to set[...]

Switching Commands 184 ProSafe Managed Switch waits for a query to be received on an interface before the interface is removed from the list of interfaces with multicast routers attached. The range is 0 to 3600 seconds. A value of 0 indicates an infinite timeout, that is, no expiration. Default Format set mld mcrtexpiretime vlanid 0-3600 Mode • G[...]

Switching Commands 185 ProSafe Managed Switch no set mld mrouter interface Use this command to disable the status of the interface as a statically configured multicast router-attached interface. Format no set mld mrouter interface Mode show mldsnooping Use this command to display MLD Snooping information. Configured information is displayed whether[...]

Switching Commands 186 ProSafe Managed Switch When you specify a value for vlanid , the following information appears. VLAN Admin Mode show mldsnooping mrouter interface Use this command to display information about statically configured multicast router attached interfaces. Format show mldsnooping mrouter interface unit/slot/port Mode Interface Mu[...]

VLAN ID MAC Address Type Description Interfaces Switching Commands 187 ProSafe Managed Switch MLD Snooping Querier Commands In an IPv6 environment, MLD Snooping requires that one central switch or router periodically query all end-devices on the network to announce their multicast memberships. This central device is the MLD Querier. The MLD query r[...]

Switching Commands 188 ProSafe Managed Switch no set mld querier Use this command to disable MLD Snooping Querier on the system. Use the optional parameter address to reset the querier address. no set mld querier [ vlan-id ][ address ] • Global Config • VLAN Mode set mld querier query_interval Use this command to set the MLD Querier Query Inter[...]

Switching Commands 189 ProSafe Managed Switch set mld querier election participate Use this command to enable the Snooping Querier to participate in the Querier Election process when it discovers the presence of another Querier in the VLAN. When this mode is enabled, if the Snooping Querier finds that the other Querier’s source address is better [...]

Switching Commands 190 ProSafe Managed Switch When you specify a value for vlanid , the following information appears. When the optional argument detail is used, the command shows the global information and the information for all Querier-enabled VLANs. Port Security Commands This section describes the commands you use to configure Port Security on[...]

Switching Commands 191 ProSafe Managed Switch port-security This command enables port locking at the system level (Global Config) or port level (Interface Config) Default Format port-security Mode • Global Config • Interface Config . no port-security This command disables port locking for one (Interface Config) or all (Global Config) ports. For[...]

Switching Commands 192 ProSafe Managed Switch no port-security max-static This command sets maximum number of statically locked MAC addresses to the default value. Format no port-security max-static Mode port-security mac-address This command adds a MAC address to the list of statically locked MAC addresses. The <vid> is the VLAN ID. Format p[...]

Switching Commands 193 ProSafe Managed Switch no port-security mac-address sticky The no form removes the sticky mode. The sticky MAC address can be deleted by using the command no port-security mac-address <mac-address> <vid> . Format no port-security mac-address sticky [<mac-address> <vid>] Modes • Global Config • Inte[...]

Switching Commands 194 ProSafe Managed Switch show port-security static This command displays the statically locked MAC addresses for port. Format show port-security static [lag <lag-intf-num> | <unit/slot/port> ] Mode MAC Address show port-security violation This command displays the source MAC address of the last packet discarded on a[...]

Switching Commands 195 ProSafe Managed Switch lldp receive Use this command to enable the LLDP receive capability. Default Format lldp receive Mode no lldp receive Use this command to return the reception of LLDPDUs to the default value. Format no lldp receive Mode lldp timers Use this command to set the timing parameters for local data transmissio[...]

Switching Commands 196 ProSafe Managed Switch Use port-desc to transmit the port description TLV. To configure the port description, see description on page 41 Default Format lldp transmit-tlv [sys-desc] [sys-name] [sys-cap] [port-desc] Mode no lldp transmit-tlv Use this command to remove an optional TLV from the LLDPDUs. Use the command without pa[...]

Switching Commands 197 ProSafe Managed Switch no lldp notification Use this command to disable notifications. Default Format no lldp notification Mode lldp notification-interval Use this command to configure how frequently the system sends remote data change notifications. The <interval> parameter is the number of seconds to wait between send[...]

Switching Commands 198 ProSafe Managed Switch show lldp Use this command to display a summary of the current LLDP configuration. Format show lldp Mode Transmit Interval Transmit Hold Multiplier Re-initialization Delay Notification Interval show lldp interface Use this command to display a summary of the current LLDP configuration for a specific int[...]

Switching Commands 199 ProSafe Managed Switch show lldp statistics Use this command to display the current LLDP traffic and remote table statistics for a specific interface or for all interfaces. Format show lldp statistics {<unit/slot/port> | all} Mode Last Update Total Inserts Total Deletes Total Drops Total Ageouts The table contains the f[...]

Switching Commands 200 ProSafe Managed Switch show lldp remote-device Use this command to display summary information about remote devices that transmit current LLDP data to the system. You can show information about LLDP remote data received on all ports or on a specific port. Format show lldp remote-device {<unit/slot/port> | all} Mode Loca[...]

Switching Commands 201 ProSafe Managed Switch show lldp remote-device detail Use this command to display detailed information about remote devices that transmit current LLDP data to an interface on the system. Format show lldp remote-device detail <unit/slot/port> Mode Local Interface Remote Identifier Chassis ID Subtype Chassis ID Port ID Su[...]

Switching Commands 202 ProSafe Managed Switch Port ID: 00:FC:E3:90:01:11 System Name: System Description: Port Description: System Capabilities Supported: System Capabilities Enabled: Time to Live: 24 seconds show lldp local-device Use this command to display summary information about the advertised LLDP local data. This command can display summary[...]

Switching Commands 203 ProSafe Managed Switch LLDP-MED Commands Link Layer Discovery Protocol - Media Endpoint Discovery (LLDP-MED) (ANSI-TIA-1057) provides an extension to the LLDP standard. Specifically, LLDP-MED provides extensions for network configuration and policy, device location, Power over Ethernet (PoE) management and inventory managemen[...]

Switching Commands 204 ProSafe Managed Switch no ldp med confignotification Use this command to disable notifications. Format no lldp med confignotification Mode lldp med transmit-tlv Use this command to specify which optional Type Length Values (TLVs) in the LLDP MED set will be transmitted in the Link Layer Discovery Protocol Data Units (LLDPDUs)[...]

Switching Commands 205 ProSafe Managed Switch lldp med all Format lldp med all Mode Use this command to configure LLDP-MED on all the ports no lldp med all Use this command to remove LLDP-MD on all ports. Format no lldp med all Mode lldp med confignotification all U Format lldp med confignotification all Mode se this command to configure all the po[...]

Switching Commands 206 ProSafe Managed Switch lldp med transmit-tlv all Use this command to specify which optional Type Length Values (TLVs) in the LLDP MED set will be transmitted in the Link Layer Discovery Protocol Data Units (LLDPDUs). Default Format lldp med transmit-tlv all [capabilities] [ex-pd] [ex-pse] [inventory] [location] [network-polic[...]

Switching Commands 207 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (switch) #show lldp med LLDP MED Global Configuration Fast Start Repeat Count: 3 Device Class: Network Connectivity (switch) # show lldp med interface Use this command to display a summary of the current LLDP MED configuration for [...]

Switching Commands 208 ProSafe Managed Switch 1/0/14 Down Disabled Disabled Disabled 0,1 TLV Codes: 0- Capabilities, 1- Network Policy 2- Location, 3- Extended PSE 4- Extended Pd, 5- Inventory --More-- or (q)uit (Switch) #show lldp med interface 1/0/2 Interface Link configMED operMED ConfigNotify TLVsTx --------- ------ --------- -------- ---------[...]

Switching Commands 209 ProSafe Managed Switch (Switch) #show lldp med local-device detail 1/0/8 LLDP MED Local Device Detail Interface: 1/0/8 Network Policies Media Policy Application Type : voice Vlan ID: 10 Priority: 5 DSCP: 1 Unknown: False Tagged: True Media Policy Application Type : streamingvideo Vlan ID: 20 Priority: 1 DSCP: 2 Unknown: False[...]

Switching Commands 210 ProSafe Managed Switch show lldp med remote-device This command displays summary information about remote devices that transmit current LLDP MED data to the system. You can show information about LLDP remote data received on all ports or on a specific port. Format show lldp med remote-device {<unit/slot/port> | all} Mod[...]

Switching Commands 211 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (Switch) #show lldp med remote-device detail 1/0/8 LLDP MED Remote Device Detail Device Class Shows the device class as advertized by the device remotely connected to the port. Network Policy Information Shows if network policy TLV[...]

Switching Commands 212 ProSafe Managed Switch Local Interface: 1/0/8 Remote Identifier: 18 Capabilities MED Capabilities Supported: capabilities, networkpolicy, location, extendedpse MED Capabilities Enabled: capabilities, networkpolicy Device Class: Endpoint Class I Network Policies Media Policy Application Type : voice Vlan ID: 10 Priority: 5 DSC[...]

Switching Commands 213 ProSafe Managed Switch This section describes the commands you use to configure Denial of Service (DoS) Control. The software provides support for classifying and blocking specific types of Denial of Service attacks. You can configure your system to monitor and block these types of attacks: • SIP=DIP: Source IP address = De[...]

Switching Commands 214 ProSafe Managed Switch dos-control sipdip This command enables Source IP address = Destination IP address (SIP=DIP) Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress with SIP=DIP, the packets will be dropped if the mode is enabled. Default [...]

Switching Commands 215 ProSafe Managed Switch dos-control tcpfrag This command enables TCP Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having IP Fragment Offset equal to one (1), the packets will be dropped if the mode is enabled. Default Format do[...]

Switching Commands 216 ProSafe Managed Switch Note: Some applications mirror source and destination L4 ports - RIP for example uses 520 for both. If you enable dos-control l4port, applications such as RIP may experience packet loss which would render the application inoperable. no dos-control l4port This command disables L4 Port Denial of Service p[...]

Switching Commands 217 ProSafe Managed Switch this type of attack. If packets ingress with SMAC=DMAC, the packets will be dropped if the mode is enabled. Default Format dos-control smacdmac Mode no dos-control smacdmac This command disables Source MAC address = Destination MAC address (SMAC=DMAC) Denial of Service protection. Format no dos-control [...]

Switching Commands 218 ProSafe Managed Switch no dos-control udpport This command disables UDP L4 source = destination port number (Source UDP Port = Destination UDP Port) Denial of Service protection. Format no dos-control udppport Mode dos-control tcpflagseq This command enables TCP Flag and Sequence Denial of Service protections. If the mode is [...]

Switching Commands 219 ProSafe Managed Switch dos-control tcpsyn This command enables TCP SYN and L4 source = 0-1023 Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having TCP flag SYN set and an L4 source port from 0 to 1023, the packets will be dropped if the[...]

Switching Commands 220 ProSafe Managed Switch no dos-control tcpfinurgpsh This command sets disables TCP FIN and URG and PSH and SEQ=0 checking Denial of Service protections. Format no dos-control tcpfinurgpsh Mode dos-control icmpv4 This command enables Maximum ICMPv4 Packet Size Denial of Service protections. If the mode is enabled, Denial of Ser[...]

Switching Commands 221 ProSafe Managed Switch dos-control icmpfrag This command enables ICMP Fragment Denial of Service protection. If the mode is enabled, Denial of Service prevention is active for this type of attack. If packets ingress having fragmented ICMP packets, the packets will be dropped if the mode is enabled. Default Format dos-control [...]

Switching Commands 222 ProSafe Managed Switch MAC Database Commands This section describes the commands you use to configure and view information about the MAC databases. bridge aging-time This command configures the forwarding database address aging timeout in seconds. The <seconds> parameter must be within the range of 10 to 1,000,000 secon[...]

Switching Commands 223 ProSafe Managed Switch show forwardingdb agetime This command displays the timeout for address aging. Default Format show forwardingdb agetime Mode Address Aging Timeout show mac-address-table multicast This command displays the Multicast Forwarding Database (MFDB) information. If you enter the command with no parameter, the [...]

Max MFDB Table Entries Most MFDB Entries Since Last Reset Current Entries Switching Commands 224 ProSafe Managed Switch ISDP Commands This section describes the commands you use to configure the industry standard Discovery Protocol (ISDP). isdp run This command enables ISDP on the switch. Default Format isdp run Mode no isdp run This command disabl[...]

Switching Commands 225 ProSafe Managed Switch isdp timer This command sets the period of time between sending new ISDP packets. The range is given in seconds. Default Format isdp timer <5-254> Mode isdp advertise-v2 This command enables the sending of ISDP version 2 packets from the device. Default Format isdp advertise-v2 Mode no isdp advert[...]

Switching Commands 226 ProSafe Managed Switch clear isdp counters This command clears ISDP counters. Format clear isdp counters Mode clear isdp table This command clears entries in the ISDP table. Format clear isdp table Mode show isdp This command displays global ISDP settings. Format show isdp Mode Timer Hold Time Version 2 Advertisements Device [...]

Switching Commands 227 ProSafe Managed Switch show isdp interface This command displays ISDP settings for the specified interface. Format show isdp interface {all | <unit/slot/port>} Mode Mode show isdp entry This command displays ISDP entries. If the device id is specified, then only entries for that device are shown. Format show isdp entry [...]

Switching Commands 228 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (Switch) #show isdp neighbors detail Device ID 0001f45f1bc0 Address(es): IP Address: 10.27.7.57 Capability Router Trans Bridge Switch IGMP Platform SecureStack C2 Interface 0/48 Port ID ge.3.14 Holdtime 131 Advertisement Version 2 [...]

Switching Commands 229 ProSafe Managed Switch debug isdp packet This command enables tracing of ISDP packets processed by the switch. ISDP must be enabled on both the device and the interface in order to monitor packets for a particular interface. Format debug isdp packet [{receive | transmit}] Mode no debug isdp packet This command disables tracin[...]

Switching Commands 230 ProSafe Managed Switch Priorities are differentiated by the priority field of the IEEE 802.1Q VLAN header, which identifies an IEEE 802.1p priority value. In NETGEAR Managed Switch, these priority values must be mapped to internal class-of-service (CoS) values. To enable priority-based flow control for a particular CoS value [...]

Switching Commands 231 ProSafe Managed Switch show interface priority-flow-control This command displays a summary of the priority flow control configuration for a specified interface or all interfaces. Format show interface priority-flow-control [interface <unit/slot/port>] Mode (Switch) #show interface priority-flow-control Port Drop No-Dro[...]

232 4 4. Multicast VLAN Registration (MVR) This chapter contains the following sections: • About MVR • MVR Commands About MVR Internet Group Management Protocol (IGMP) Layer 3 is widely used for IPv4 network multicasting. In Layer 2 networks, IGMP uses resources inefficiently. For example, a Layer 2 switch multicasts traffic to all ports, even [...]

Multicast VLAN Registration (MVR) 233 ProSafe Managed Switch no mvr This command disables MVR. mvr group This command adds an MVR membership group. <A.B.C.D> is the IP multicast group being added. The count is the number of incremental multicast groups being added (the first multicast group is A.B.C.D). If a count is not specified, then only [...]

Multicast VLAN Registration (MVR) 234 ProSafe Managed Switch no mvr mode This command sets the mode type to the default value. mvr querytime This command sets the MVR query response time. no mvr querytime This command sets the MVR query response time to the default value. mvr vlan This command sets the MVR multicast VLAN. no mvr vlan This command s[...]

Multicast VLAN Registration (MVR) 235 ProSafe Managed Switch received from other interested hosts that are also connected to that port, for example, using hub. • In immediate leave mode, when a leave is received, the switch is immediately reconfigured not to forward a specific multicast stream to the port where a message is received. This mode is[...]

Multicast VLAN Registration (MVR) 236 ProSafe Managed Switch no mvr vlan Use this command to exclude the port from the specific MVR group. show mvr This command displays global MVR settings. The following table explains the output parameters. Example: (Switch)#show mvr MVR Running…........................... TRUE MVR multicast VLAN…............[...]

Multicast VLAN Registration (MVR) 237 ProSafe Managed Switch The following table describes the output parameters. Example: (switch)#show mvr members MVR Group IP Status Members ------------------ --------------- --------------------- 224.1.1.1 INACTIVE 1/0/1, 1/0/2, 1/0/3 (switch)#show mvr members 224.1.1.1 MVR Group IP Status Members -------------[...]

Multicast VLAN Registration (MVR) 238 ProSafe Managed Switch (switch)#show mvr interface 1/0/9 Type: RECEIVER Status: ACTIVE Immediate Leave: DISABLED (switch)#show mvr interface Fa1/0/23 members 235.0.0.1 STATIC ACTIVE (switch)#show mvr interface Fa1/0/23 members vlan 12 235.0.0.1 STATIC ACTIVE 235.1.1.1 STATIC ACTIVE show mvr traffic This command[...]

Multicast VLAN Registration (MVR) 239 ProSafe Managed Switch IGMP Report V1 Transmitted…................................. 0 IGMP Report V2 Transmitted…................................. 3 IGMP Leave Transmitted…..................................... 1 IGMP Packet Receive Failures…............................... 0 IGMP Packet Transmit Failures[...]

240 5 5. Routing Commands This chapter describes the routing commands available in the 7000 series CLI. Note: Some commands described in this chapter require a license. For more information, see Licensing and Command Support on page 8. This chapter contains the following sections: • Address Resolution Protocol (ARP) Commands • IP Routing Comman[...]

Routing Commands 241 ProSafe Managed Switch arp This command creates an ARP entry. The value for <ipaddress> is the IP address of a device on a subnet attached to an existing routing interface. <macaddr> is a unicast MAC address for that device. The format of the MAC address is 6 two-digit hexadecimal numbers that are separated by colon[...]

Routing Commands 242 ProSafe Managed Switch address is reachable. The device only responds if all next hops in its route to the destination are through interfaces other than the interface that received the ARP request. Default Format ip proxy-arp Mode no ip proxy-arp This command disables proxy ARP on a router interface. Format no ip proxy-arp Mode[...]

Routing Commands 243 ProSafe Managed Switch arp purge This command causes the specified IP address to be removed from the ARP cache. Only entries of type dynamic or gateway are affected by this command. Format arp purge <ipaddr> Mode arp resptime This command configures the ARP request response timeout. The value for <seconds> is a vali[...]

Routing Commands 244 ProSafe Managed Switch arp timeout This command configures the ARP entry ageout time. The value for <seconds> is a valid positive integer, which represents the IP ARP entry ageout time in seconds. The range for <seconds> is between 15-21600 seconds. Default Format arp timeout <15-21600> Mode no arp timeout Thi[...]

Age Time (seconds) Response Time (seconds) Retries Cache Size Dynamic Renew Mode Total Entry Count Current / Peak Static Entry Count Configured/Active / Max Routing Commands 245 ProSafe Managed Switch The following are displayed for each ARP entry: IP Address MAC Address Interface Type Age show arp brief This command displays the brief Address Reso[...]

Routing Commands 246 ProSafe Managed Switch show arp switch This command displays the contents of the switch’s Address Resolution Protocol (ARP) table. Format show arp switch Mode IP Address MAC Address Interface IP Routing Commands This section describes the commands you use to enable and configure IP routing on the switch. routing This command [...]

Routing Commands 247 ProSafe Managed Switch You can view the current value for this function with the show ip brief command. The value is labeled as “Routing Mode.” Format no routing Mode ip routing This command enables the IP Router Admin Mode for the master switch. Format ip routing Mode no ip routing This command disables the IP Router Admin[...]

Routing Commands 248 ProSafe Managed Switch Mask of the interface. To remove all of the IP addresses (primary and secondary) configured on the interface, enter the command no ip address . Format no ip address [{<ipaddr> <subnetmask> [secondary]}] Mode ip address dhcp Use this command to enable the DHCPv4 client on an in-band interface s[...]

Routing Commands 249 ProSafe Managed Switch release dhcp Use this command to force the DHCPv4 client to release the leased address from the specified interface. Format release dhcp < unit/slot/port > Mode renew dhcp Use this command to force the DHCPv4 client to immediately renew an IPv4 address lease on the specified interface. Format renew [...]

Routing Commands 250 ProSafe Managed Switch ip route This command configures a static route. The <ipaddr> parameter is a valid IP address, and <subnetmask> is a valid subnet mask. The <nexthopip> parameter is a valid IP address of the next hop router. Specifying Null0 as nexthop parameter adds a static reject route. The optional &[...]

Routing Commands 251 ProSafe Managed Switch no ip route default This command deletes all configured default routes. If the optional <nexthopip> parameter is designated, the specific next hop is deleted from the configured default route and if the optional preference value is designated, the preference of the configured default route is reset [...]

Routing Commands 252 ProSafe Managed Switch no ip netdirbcast This command disables the forwarding of network-directed broadcasts. When disabled, network directed broadcasts are dropped. Format no ip netdirbcast Mode ip mtu This command sets the IP Maximum Transmission Unit (MTU) on a routing interface. The IP MTU is the size of the largest IP pack[...]

Routing Commands 253 ProSafe Managed Switch encapsulation This command configures the link layer encapsulation type for the packet. The encapsulation type can be ethernet or snap . Default Format encapsulation {ethernet | snap} Mode Note: Routed frames are always ethernet encapsulated when a frame is routed to a VLAN. clear ip route all This comman[...]

Routing Commands 254 ProSafe Managed Switch The following shows example CLI display output for the command. (Switch) #show ip brief Default Time to Live........................... 64 Routing Mode................................... Disabled Maximum Next Hops.............................. 4 Maximum Routes................................. 6000 ICMP Ra[...]

Routing Commands 255 ProSafe Managed Switch The following shows example CLI display output for the command. (Switch) >show ip interface 1/0/2 Routing Interface Status....................... Down Method......................................... None Routing Mode................................... Disable Administrative Mode........................[...]

Routing Commands 256 ProSafe Managed Switch show ip interface brief This command displays summary information about IP configuration settings for all ports in the router. Format show ip interface brief Modes • Privileged EXEC • User EXEC Interface State IP Address IP Mask Netdir Bcast MultiCast Fwd Method show ip protocols This command lists a [...]

Routing Commands 257 ProSafe Managed Switch show ip route This command displays the routing table. The <ip-address> specifies the network for which the route is to be displayed and displays the best matching best-route for the address. The <mask> specifies the subnet mask for the given <ip-address> . When you use the longer-prefix[...]

Routing Commands 258 ProSafe Managed Switch A “T” flag appended to a route indicates that it is an ECMP route, but only one of its next hops has been installed in the forwarding table. The forwarding table might limit the number of ECMP routes or the number of ECMP groups. When an ECMP route cannot be installed because such a limit is reached, [...]

Routing Commands 259 ProSafe Managed Switch source. This is typically used for preventing routing loops. The reject route added in the RTO is of the type OSPF Inter-Area. Reject routes (routes of REJECT type installed by any protocol) are not redistributed by OSPF/RIP. Reject routes are supported in both OSPFv2 and OSPFv3. The following shows examp[...]

Routing Commands 260 ProSafe Managed Switch show ip route summary Use this command to display the routing table summary. Use the optional all parameter to show the number of all routes, including best and non-best routes. To include only the number of best routes, do not use the optional parameter. When the optional keyword all is given, some stati[...]

Routing Commands 261 ProSafe Managed Switch The following shows example CLI display output for the command. (router) #show ip route summary Connected Routes............................... 7 Static Routes.................................. 1 RIP Routes..................................... 20 OSPF Routes.................................... 1004 Intra [...]

Routing Commands 262 ProSafe Managed Switch Routes with 2 Next Hops........................ 1 Routes with 4 Next Hops........................ 1000 show ip route preferences This command displays detailed information about the route preferences. Route preferences are used in determining the best route. Lower router preference values are preferred ov[...]

Routing Commands 263 ProSafe Managed Switch The following shows example CLI display output for the command. (netgear switch) #show routing heap summary Heap Size....................... 92594000 bytes Memory In Use................... 149598 bytes (0%) Memory on Free List............. 78721 bytes (0%) Memory Available in Heap........ 92365249 bytes ([...]

Routing Commands 264 ProSafe Managed Switch ip irdp multicast This command configures the address that the interface uses to send the router discovery advertisements. The address is 224.0.0.1, which is the all-hosts IP multicast address. Default Format ip irdp multicast Mode no ip irdp multicast This command configures the address used to advertise[...]

Routing Commands 265 ProSafe Managed Switch no ip irdp maxadvertinterval This command configures the default maximum time, in seconds. Format no ip irdp maxadvertinterval Mode ip irdp minadvertinterval This command configures the minimum time, in seconds, allowed between sending router advertisements from the interface. The range for minadvertinter[...]

Routing Commands 266 ProSafe Managed Switch show ip irdp This command displays the router discovery information for all interfaces, or a specified interface. Format show ip irdp {<unit/slot/port> | all} Modes • Privileged EXEC • User EXEC Interface Ad Mode Advertise Address Max Int Min Int Hold Time Preference Virtual LAN Routing Commands[...]

Routing Commands 267 ProSafe Managed Switch no vlan routing This command deletes routing on a VLAN. The <vlanid> value has a range from 1 to 4093. Format no vlan routing <vlanid> Mode show ip vlan This command displays the VLAN routing information for all VLANs with routing enabled. Format show ip vlan Modes • Privileged EXEC • User[...]

Routing Commands 268 ProSafe Managed Switch no ip vrrp Use this command in Global Config mode to disable the default administrative mode of VRRP on the router. Format no ip vrrp Mode ip vrrp (Interface Config) Use this command in Interface Config mode to create a virtual router associated with the interface. The parameter <vrid> is the virtua[...]

Routing Commands 269 ProSafe Managed Switch ip vrrp ip This command sets the virtual router IP address value for an interface. The value for <ipaddr> is the IP address which is to be configured on that interface for VRRP. The parameter <vrid> is the virtual router ID which has an integer value range from 1 to 255. You can use the option[...]

Routing Commands 270 ProSafe Managed Switch ip vrrp preempt This command sets the preemption mode value for the virtual router configured on a specified interface. The parameter <vrid> is the virtual router ID, which is an integer from 1 to 255. Default Format ip vrrp <vrid> preempt Mode no ip vrrp preempt This command sets the default [...]

Routing Commands 271 ProSafe Managed Switch ip vrrp timers advertise This command sets the frequency, in seconds, that an interface on the specified virtual router sends a virtual router advertisement. Default Format ip vrrp <vrid> timers advertise <1-255> Mode no ip vrrp timers advertise This command sets the default virtual router adv[...]

Routing Commands 272 ProSafe Managed Switch no ip vrrp track interface Use this command to remove the interface from the tracked list or to restore the priority decrement to its default. Format no ip vrrp <vrid> track interface <unit/slot/port> [decrement] Mode ip vrrp track ip route Use this command to track the route reachability. Whe[...]

Routing Commands 273 ProSafe Managed Switch Ping to a VRRP IP address only works from the host side (where the VRRP router is configured). There is no value in pinging to the VRRP IP from another interface because packet flow from the network to the host doesn't involve VRRP. This is used only to troubleshoot a connectivity problem for traffic[...]

Routing Commands 274 ProSafe Managed Switch show ip vrrp This command displays whether VRRP functionality is enabled or disabled on the switch. It also displays some global parameters which are required for monitoring. This command takes no options. Format show ip vrrp Modes • Privileged EXEC • User EXEC Admin Mode Router Checksum Errors Router[...]

Routing Commands 275 ProSafe Managed Switch show ip vrrp interface This command displays all configuration information and VRRP router statistics of a virtual router configured on a specific interface. Use the output of the command to verify the track interface and track IP route configurations. Format show ip vrrp interface { <interface-name>[...]

Routing Commands 276 ProSafe Managed Switch show ip vrrp interface brief This command displays information about each virtual router configured on the switch. This command takes no options. It displays information about each virtual router. Format show ip vrrp interface brief Modes • Privileged EXEC • User EXEC Interface VRID IP Address Mode St[...]

Routing Commands 277 ProSafe Managed Switch bootpdhcprelay maxhopcount This command configures the maximum allowable relay agent hops for BootP/DHCP Relay on the system. The <hops> parameter has a range of 1 to 16. Default Format bootpdhcprelay maxhopcount <1-16> Mode no bootpdhcprelay maxhopcount This command configures the default max[...]

Routing Commands 278 ProSafe Managed Switch IP Helper Commands This section describes the commands to configure a DHCP relay agent with multiple DHCP server addresses per routing interface, and to use different server addresses for client packets arriving on different interfaces on the relay agent. clear ip helper statistics Use this command to res[...]

Routing Commands 279 ProSafe Managed Switch udp-port-list: The broadcast packet destination UDP port number to forward. If not specified, packets for the default services are forwarded to the helper address. Valid range, 0-65535. Default Format ip helper-address <ip-address> {<1-65535>|dhcp|domain|isakmp|mobile-ip|nameserver| netbios-dg[...]

Routing Commands 280 ProSafe Managed Switch on the routing interface to form the helper addresses list until the list reaches the maximum supported helper addresses. Format ip helper-address <ip-address> {<1-65535>|dhcp|domain|isakmp|mobile-ip|nameserver| netbios-dgm|netbios-ns|ntp|pim-auto-rip|rip|tacacs|tftp|time} Mode no ip helper-ad[...]

Routing Commands 281 ProSafe Managed Switch Helper IP Address.............................. 1.2.3.4 ............................................... 1.2.3.5 show ip helper statistics Use this command to display the number of DHCP and other UDP packets processed and relayed by the UDP relay agent. Format show ip helper statistics Mode Privileged EXEC[...]

Routing Commands 282 ProSafe Managed Switch Open Shortest Path First (OSPF) Commands This section describes the commands you use to view and configure OSPF, which is a link-state routing protocol that you use to route traffic within a network. router ospf Use this command to enter Router OSPF mode. Format router ospf Mode enable (OSPF) This command[...]

Routing Commands 283 ProSafe Managed Switch no network area (OSPF) Use this command to disable the OSPFv2 on a interface if the IP address of an interface was earlier covered by this network command. Format no network <ip-address> <wildcard-mask> area <area-id> Mode ip ospf area Use this command to enable OSPFv2 and set the area I[...]

Routing Commands 284 ProSafe Managed Switch no 1583compatibility This command disables OSPF 1583 compatibility. Format no 1583compatibility Mode area default-cost (OSPF) This command configures the default cost for the stub area. You must specify the area ID and an integer value between 1-16777215. Format area <areaid> default-cost <1-1677[...]

Routing Commands 285 ProSafe Managed Switch no area nssa default-info-originate (OSPF) This command disables the default route advertised into the NSSA. Format no area <areaid> nssa default-info-originate [<metric>] [{comparable | non-comparable}] Mode area nssa no-redistribute (OSPF) This command configures the NSSA Area Border router [...]

Routing Commands 286 ProSafe Managed Switch of candidate causes the router to participate in the translator election process when it attains border router status. Format area <areaid> nssa translator-role {always | candidate} Mode no area nssa translator-role (OSPF) This command disables the nssa translator role from the specified area id. Fo[...]

Routing Commands 287 ProSafe Managed Switch no area range The no form of this command deletes a specified area range or reverts an option to its default. Format no area areaid range prefix netmask {summarylink | nssaexternallink} [advertise | not-advertise] [cost] Mode area stub (OSPF) This command creates a stub area for the specified area ID. A s[...]

Routing Commands 288 ProSafe Managed Switch area stub no-summary (OSPF) This command configures the Summary LSA mode for the stub area identified by <areaid> . Use this command to prevent LSA Summaries from being sent. Default Format area <areaid> stub no-summary Mode no area stub no-summary This command configures the default Summary L[...]

Routing Commands 289 ProSafe Managed Switch specified. The default value for authentication type is none. Neither the default password key nor the default key id are configured. Default Format area <areaid> virtual-link <neighbor> authentication {none | {simple <key>} | {encrypt <key> <keyid>}} Mode no area virtual-lin[...]

Routing Commands 290 ProSafe Managed Switch no area virtual-link hello-interval This command configures the default hello interval for the OSPF virtual interface on the virtual interface identified by < areaid > and < neighbor > . The < neighbor > parameter is the Router ID of the neighbor. Format no area <areaid> virtual-li[...]

Routing Commands 291 ProSafe Managed Switch auto-cost (OSPF) By default, OSPF computes the link cost of each interface from the interface bandwidth. Faster links have lower metrics, making them more attractive in route selection. The configuration parameters in the auto-cost reference bandwidth and bandwidth commands give you control over the defau[...]

Routing Commands 292 ProSafe Managed Switch no bandwidth Use this command to set the interface bandwidth to its default value. Format no bandwidth Mode capability opaque Use this command to enable Opaque Capability on the Router. The information contained in Opaque LSAs may be used directly by OSPF or indirectly by an application wishing to distrib[...]

Routing Commands 293 ProSafe Managed Switch clear ip ospf neighbor Use this command to drop the adjacency with all OSPF neighbors. On each neighbor’s interface, send a one-way hello. Adjacencies may then be re-established. To drop all adjacencies with a specific router ID, specify the neighbor’s Router ID using the optional parameter [ neighbor[...]

Routing Commands 294 ProSafe Managed Switch no default-information originate (OSPF) This command is used to control the advertisement of default routes. Format no default-information originate [metric] [metric-type] Mode default-metric (OSPF) This command is used to set a default for the metric of distributed routes. Format default-metric <1-167[...]

Routing Commands 295 ProSafe Managed Switch distribute-list out (OSPF) Use this command to specify the access list to filter routes received from the source protocol. Format distribute-list <1-199> out {rip | static | connected} Mode no distribute-list out Use this command to specify the access list to filter routes received from the source p[...]

Routing Commands 296 ProSafe Managed Switch no external-lsdb-limit This command configures the default external LSDB limit for OSPF. Format no external-lsdb-limit Mode log-adjacency-changes To enable logging of OSPFv2 neighbor state changes, use this command in router configuration mode. State changes are logged with INFORMATIONAL severity. Default[...]

Routing Commands 297 ProSafe Managed Switch no ip ospf authentication This command sets the default OSPF Authentication Type for the specified interface. Format no ip ospf authentication Mode ip ospf cost This command configures the cost on an OSPF interface. The < cost > parameter has a range of 1 to 65535. Default Format ip ospf cost < 1[...]

Routing Commands 298 ProSafe Managed Switch ip ospf dead-interval This command sets the OSPF dead interval for the specified interface. The value for < seconds > is a valid positive integer, which represents the length of time in seconds that a router's Hello packets have not been seen before its neighbor routers declare that the router [...]

Routing Commands 299 ProSafe Managed Switch OSPF can operate more efficiently by treating the network as a point-to-point network. For point-to-point networks, OSPF does not elect a designated router or generate a network link state advertisement (LSA). Both endpoints of the link must be configured to operate in point-to-point mode. Default Format [...]

Routing Commands 300 ProSafe Managed Switch no ip ospf retransmit-interval This command sets the default OSPF retransmit Interval for the specified interface. Format no ip ospf retransmit-interval Mode ip ospf transmit-delay This command sets the OSPF Transit Delay for the specified interface. The transmit delay is specified in seconds. In addition[...]

Routing Commands 301 ProSafe Managed Switch router-id (OSPF) This command sets a 4-digit dotted-decimal number uniquely identifying the router ospf id. The < ipaddress > is a configured value. Format router-id <ipaddress> Mode redistribute (OSPF) This command configures OSPF protocol to allow redistribution of routes from the specified [...]

Routing Commands 302 ProSafe Managed Switch passive-interface default (OSPF) Use this command to enable global passive mode by default for all interfaces. It overrides any interface level passive mode. OSPF will not form adjacencies over a passive interface. Default Format passive-interface default Mode no passive-interface default Use this command[...]

Routing Commands 303 ProSafe Managed Switch no timers pacing flood To revert LSA transmit pacing to the default rate, use the no timers pacing flood command. Format no timers pacing flood Mode timers pacing lsa-group To adjust how OSPF groups LSAs for periodic refresh, use this command in OSPFv2 Router Configuration mode. OSPF refreshes self-origin[...]

Routing Commands 304 ProSafe Managed Switch trapflags (OSPF) Use this command to enable individual OSPF traps, enable a group of trap flags at a time, or enable all the trap flags at a time. The different groups of trapflags, and each group’s specific trapflags to enable or disable, are listed in Table 1 . Table 1. Trapflags Groups errors • aut[...]

Routing Commands 305 ProSafe Managed Switch no trapflags Use this command to revert to the default reference bandwidth. • To disable the individual flag, enter the group name followed by that particular flag. • To disable all the flags in that group, give the group name followed by all . • To disable all the flags, give the command as trapfla[...]

Routing Commands 306 ProSafe Managed Switch show ip ospf This command displays information relevant to the OSPF router. Format show ip ospf Mode Note: Some of the information below displays only if you enable OSPF and configure certain features. Privileged EXEC Term Definition Router ID A 32-bit integer in dotted decimal format identifying the rout[...]

Routing Commands 307 ProSafe Managed Switch ASBR Status Reflects whether the ASBR mode is enabled or disabled. Enable implies that the router is an autonomous system border router. The router automatically becomes an ASBR when it is configured to redistribute routes learnt from other protocols. The possible values for the ASBR status is enabled (if[...]

Routing Commands 308 ProSafe Managed Switch The following shows example CLI display output for the command. (Switch) #show ip ospf Router ID.....................................2.2.2.2 OSPF Admin Mode...............................Disable RFC 1583 Compatibility........................Enable External LSDB Limit...........................No Limit Exi[...]

Routing Commands 309 ProSafe Managed Switch Number of Active Areas......................... 3 (3 normal, 0 stub, 0 nssa) ABR Status....................................Disable ASBR Status...................................Disable Stub Router...................................FALSE External LSDB Overflow........................FALSE External LSA Coun[...]

AreaID External Routing Spf Runs Area Border Router Count Area LSA Count Area LSA Checksum Import Summary LSAs OSPF Stub Metric Value Routing Commands 310 ProSafe Managed Switch The following OSPF NSSA specific information displays only if the area is configured as an NSSA: Import Summary LSAs Redistribute into NSSA Default Information Originate De[...]

Routing Commands 311 ProSafe Managed Switch show ip ospf asbr This command displays the internal OSPF routing table entries to Autonomous System Boundary Routers (ASBR). This command takes no options. Format show ip ospf asbr Mode • Privileged EXEC • User EXEC Type Router ID Cost Area ID Next Hop Next Hop Intf show ip ospf database This command[...]

Routing Commands 312 ProSafe Managed Switch The information below is only displayed if OSPF is enabled. Format show ip ospf [<areaid>] database [{database-summary | [{asbr-summary | external | network | nssa-external | opaque-area | opaque-as | opaque-link | router | summary}] [{adv-router [<ipaddr>] | self-originate}]}] Mode • Privil[...]

Routing Commands 313 ProSafe Managed Switch show ip ospf interface This command displays the information for the IFO object or virtual interface tables. Format show ip ospf interface {<unit/slot/port> | loopback <loopback-id> | vlan <1-4093>} Mode • Privileged EXEC • User EXEC Type-7 Ext Total number of Type-7 external LSAs in[...]

Routing Commands 314 ProSafe Managed Switch The information below will only be displayed if OSPF is enabled. OSPF Interface Type State Designated Router Backup Designated Router Number of Link Events Local Link LSAs Local Link LSA Checksum show ip ospf interface brief This command displays brief information for the IFO object or virtual interface t[...]

Routing Commands 315 ProSafe Managed Switch show ip ospf interface stats This command displays the statistics for a specific interface. The information below will only be displayed if OSPF is enabled. Format show ip ospf interface stats <unit/slot/port> Modes • Privileged EXEC • User EXEC Retransmit Interval A number representing the OSPF[...]

Routing Commands 316 ProSafe Managed Switch The command lists the number of OSPF packets of each type sent and received on the interface. Source Not On Local Subnet The number of received packets discarded because the source IP address is not within a subnet configured on a local interface. Note: This field only applies to OSPFv2. Virtual Link Not [...]

Routing Commands 317 ProSafe Managed Switch show ip ospf neighbor This command displays information about OSPF neighbors. If you do not specify a neighbor IP address, the output displays summary information in a table. If you specify an interface or tunnel, only the information for that interface or tunnel displays. The <ip-address> is the IP[...]

Routing Commands 318 ProSafe Managed Switch If you specify an IP address for the neighbor router, the following fields display: Interface Neighbor IP Address Interface Index Area ID Options Router Priority Dead Timer Due Up Time State Events Retransmission Queue Length The following shows example CLI display output for the command. (Switch) #show i[...]

Routing Commands 319 ProSafe Managed Switch show ip ospf range This command displays information about the area ranges for the specified < areaid > . The < areaid > identifies the OSPF area whose ranges are being displayed. Format show ip ospf range < areaid > Modes • Privileged EXEC • User EXEC Area ID IP Address Subnet Mask [...]

Routing Commands 320 ProSafe Managed Switch show ip ospf stub table This command displays the OSPF stub table. The information below will only be displayed if OSPF is initialized on the switch. Format show ip ospf stub table Modes • Privileged EXEC • User EXEC Area ID Type of Service Metric Val Import Summary LSA show ip ospf traffic This comma[...]

Routing Commands 321 ProSafe Managed Switch The following shows example CLI display output for the command. (netgear switch) #show ip ospf traffic Time Since Counters Cleared: 4000 seconds OSPFv2 Packet Statistics Hello Database Desc LS Request LS Update LS ACK Total Recd: 500 10 20 50 20 600 Sent: 400 8 16 40 16 480 LSAs Retransmitted.............[...]

Routing Commands 322 ProSafe Managed Switch show ip ospf virtual-link brief This command displays the OSPF Virtual Interface information for all areas in the system. Format show ip ospf virtual-link brief Modes • Privileged EXEC • User EXEC Area ID Neighbor Hello Interval Dead Interval Retransmit Interval Transit Delay OSPF Graceful Restart Com[...]

Routing Commands 323 ProSafe Managed Switch thereby avoiding announcement of a topology change and the potential for flooding of LSAs and shortest-path-first (SPF) runs, which determine OSPF routes. Helpful neighbors continue to forward packets through the restarting router. The restarting router relearns the network topology from its helpful neigh[...]

Routing Commands 324 ProSafe Managed Switch set long enough to allow the restarting router to reestablish all of its adjacencies and complete a full database exchange with each of those neighbors. no nsfrestart-interval Use this command to revert the grace period to its default value. nsf helper Use this command to enable helpful neighbor functiona[...]

Routing Commands 325 ProSafe Managed Switch nsf helper disable Use this command to disable helpful neighbor functionality for OSPF. Note: The commands no nsf helper and nsf ietf helper disable are functionally equivalent. The command nsf ietf helper disable is supported solely for compatibility with other network software CLI. nsf [ietf] helper str[...]

Routing Commands 326 ProSafe Managed Switch max-metric router-lsa To configure OSPF to enter stub router mode, use this command in Router OSPF Global Configuration mode. When OSPF is in stub router mode, as defined by RFC 3137, OSPF sets the metric in the non-stub links in its router LSA to LsInfinity. Other routers therefore compute very long path[...]

Routing Commands 327 ProSafe Managed Switch the command no max-metric router-lsa on-startup . The command no max-metric router-lsa summary-lsa causes OSPF to send summary LSAs with metrics computed using normal procedures defined in RFC 2328. Format no max-metric router-lsa [on-startup] [summary-lsa] Mode OSPF Interface Flap Dampening Commands Damp[...]

Routing Commands 328 ProSafe Managed Switch show dampening interface This command summarizes the number of interfaces configured with dampening and the number of interfaces being suppressed. Format show dampening interface Mode The following shows example CLI display output for the command. (netgear switch)# show dampening interface 2 interfaces ar[...]

Routing Commands 329 ProSafe Managed Switch Any change in the dampening configuration resets the current penalty, reuse time, and suppressed state to their default values, meaning 0, 0, and FALSE respectively. The following shows example CLI display output for the command. (netgear switch)# show interface dampening Interface 0/2 Flaps Penalty Supp [...]

Routing Commands 330 ProSafe Managed Switch ip rip This command enables RIP on a router interface. Default Format ip rip Mode no ip rip This command disables RIP on a router interface. Format no ip rip Mode auto-summary This command enables the RIP auto-summarization mode. Default Format auto-summary Mode no auto-summary This command disables the R[...]

Routing Commands 331 ProSafe Managed Switch default-metric (RIP) This command is used to set a default for the metric of distributed routes. Format default-metric < 0-15 > Mode no default-metric (RIP) This command is used to reset the default metric of distributed routes to its default value. Format no default-metric Mode distance rip This co[...]

Routing Commands 332 ProSafe Managed Switch no distribute-list out This command is used to specify the access list to filter routes received from the source protocol. Format no distribute-list <1-199> out {ospf | static | connected} Mode ip rip authentication This command sets the RIP Version 2 Authentication Type and Key for the specified in[...]

Routing Commands 333 ProSafe Managed Switch no ip rip receive version This command configures the interface to allow RIP control packets of the default version(s) to be received. Format no ip rip receive version Mode ip rip send version This command configures the interface to allow RIP control packets of the specified version to be sent. The value[...]

Routing Commands 334 ProSafe Managed Switch split-horizon This command sets the RIP split horizon mode. Split horizon is a technique for avoiding problems caused by including routes in updates sent to the router from which the route was originally learned. The options are: None - no special processing for this case. Simple - a route will not be inc[...]

Routing Commands 335 ProSafe Managed Switch show ip rip This command displays information relevant to the RIP router. Format show ip rip Modes • Privileged EXEC • User EXEC RIP Admin Mode Split Horizon Mode Auto Summary Mode Host Routes Accept Mode Global Route Changes Global queries Default Metric Default Route Advertise show ip rip interface [...]

Routing Commands 336 ProSafe Managed Switch show ip rip interface This command displays information related to a particular RIP interface. Format show ip rip interface { <unit/slot/port> | vlan <1-4093>} Modes • Privileged EXEC • User EXEC Interface IP Address Send Version Receive Version RIP Admin Mode Link State Authentication Typ[...]

Routing Commands 337 ProSafe Managed Switch ip unreachables Use this command to enable the generation of ICMP Destination Unreachable messages. By default, the generation of ICMP Destination Unreachable messages is enabled. Default Format ip unreachables Mode no ip unreachables Use this command to prevent the generation of ICMP Destination Unreacha[...]

Routing Commands 338 ProSafe Managed Switch no ip icmp echo-reply Use this command to prevent the generation of ICMP Echo Reply messages by the router. Format no ip icmp echo-reply Mode ip icmp error-interval Use this command to limit the rate at which IPv4 ICMP error messages are sent. The rate limit is configured as a token bucket, with two confi[...]

339 6 6. IP Multicast Commands This chapter describes the IP Multicast commands available in the managed switch CLI. Note: Some commands described in this chapter require a license. For more information, see Licensing and Command Support on page 8. This chapter contains the following sections: • Multicast Commands • DVMRP Commands • PIM Comma[...]

IP Multicast Commands 340 ProSafe Managed Switch no ip mcast boundary This command deletes an administrative scope multicast boundary specified by < groupipaddr > and < mask > for which this multicast administrative boundary is applicable. < groupipaddr > is a group IP address and < mask > is a group IP mask. Format Mode ip [...]

IP Multicast Commands 341 ProSafe Managed Switch no ip multicast ttl-threshold This command applies the default < ttlthreshold> to a routing interface. The < ttlthreshold> is the TTL threshold which is to be applied to the multicast Data packets which are to be forwarded from the interface . Format no ip multicast ttl-threshold Mode ip [...]

IP Multicast Commands 342 ProSafe Managed Switch show ip mcast boundary This command displays all the configured administrative scoped multicast boundaries. Format show ip mcast boundary {<unit/slot/port> | all} Modes • Privileged EXEC • User EXEC Interface Group Ip Mask show ip mcast interface This command displays the multicast informat[...]

IP Multicast Commands 343 ProSafe Managed Switch If you use the detail parameter, the command displays the following fields: Source IP Group IP Expiry Time Up Time RPF Neighbor Flags If you use the summary parameter, the command displays the following fields: Source IP Group IP Protocol Incoming Interface Outgoing Interface List show ip mcast mrout[...]

IP Multicast Commands 344 ProSafe Managed Switch show ip mcast mroute source This command displays the multicast configuration settings such as flags, timer settings, incoming and outgoing interfaces, RPF neighboring routers, and expiration times of all the entries in the multicast mroute table containing the given source IP address or source IP ad[...]

IP Multicast Commands 345 ProSafe Managed Switch ip dvmrp(Global Config) This command sets administrative mode of DVMRP in the router to active. Default Format ip dvmrp Mode no ip dvmrp(Global Config) This command sets administrative mode of DVMRP in the router to inactive. Format no ip dvmrp Mode ip dvmrp metric This command configures the metric [...]

IP Multicast Commands 346 ProSafe Managed Switch no ip dvmrp trapflags This command disables the DVMRP trap mode. Format no ip dvmrp trapflags Mode ip dvmrp This command sets the administrative mode of DVMRP on an interface to active. Default Format ip dvmrp Mode no ip dvmrp This command sets the administrative mode of DVMRP on an interface to inac[...]

IP Multicast Commands 347 ProSafe Managed Switch show ip dvmrp interface This command displays the interface information for DVMRP on the specified interface. Format show ip dvmrp interface < unit/slot/port > Modes • Privileged EXEC • User EXEC Interface Mode Metric Local Address The following field is displayed only when DVMRP is operati[...]

IfIndex Nbr IP Addr State Up Time Expiry Time Generation ID Major Version Minor Version Capabilities Received Routes Rcvd Bad Pkts Rcvd Bad Routes IP Multicast Commands 348 ProSafe Managed Switch show ip dvmrp nexthop This command displays the next hop information on outgoing interfaces for routing multicast datagrams. Format show ip dvmrp nexthop [...]

IP Multicast Commands 349 ProSafe Managed Switch show ip dvmrp prune This command displays the table listing the router’s upstream prune information. Format show ip dvmrp prune Modes • Privileged EXEC • User EXEC Group IP Source IP Source Mask Expiry Time (secs) show ip dvmrp route This command displays the multicast routing information for D[...]

IP Multicast Commands 350 ProSafe Managed Switch routing across the Internet, independent of the mechanisms provided by any particular unicast routing protocol. ip pim dense (Global Config) This command enables the administrative mode of PIM-DM in the router. Default Format ip pim dense Mode no ip pim dense (Global Config) This command disables the[...]

IP Multicast Commands 351 ProSafe Managed Switch no ip pim hello-interval This command resets the transmission frequency of hello messages between PIM enabled neighbors to its default value. Format no ip pim hello-interval Mode show ip pim interface This command displays the PIM Interface status parameters. If the interface number is not specified,[...]

IP Multicast Commands 352 ProSafe Managed Switch Join Prune Interval (secs) 60 DR Priority NA BSR Border Disabled Neighbor Count 1 Designated Router NA show ip pim neighbor This command displays the neighbor information for PIM on the specified interface. Format show ip pim neighbor <unit/slot/port> Modes Neighbor Address Interface UpTime Exp[...]

IP Multicast Commands 353 ProSafe Managed Switch no ip pim sparse(Global Config) This command is used to administratively disable PIM-SM multicast routing mode on the router. Format no ip pim sparse Mode ip pim bsr-border Use this command to prevent bootstrap router (BSR) messages from being sent or received through an interface. Default Format ip [...]

IP Multicast Commands 354 ProSafe Managed Switch no ip pim bsr-candidate This command is used to disable the router to announce its candidacy as a bootstrap router (BSR). Format no ip pim bsr-candidate interface [vlan | <unit/slot/port>] Mode ip pim dr-priority Use this command to set the priority value for which a router is elected as the de[...]

IP Multicast Commands 355 ProSafe Managed Switch < groupaddress > is the group address supported by the RP. The parameter < groupmask > is the group mask for the group address. The optional keyword override indicates that if there is a conflict, the RP configured with this command prevails over the RP learned by BSR. Default Format ip p[...]

IP Multicast Commands 356 ProSafe Managed Switch ip pim ssm Use this command to define the Source Specific Multicast (SSM) range of IP multicast addresses. Default Format ip pim ssm {default | <group-address> <group-mask>} Mode default-range no ip pim ssm This command is used to disable the Source Specific Multicast (SSM) range. Format [...]

PIM Mode Interface Interface-Mode Operational-Sta tus IP Multicast Commands 357 ProSafe Managed Switch Example 1: (Switch) #show ip pim PIM Mode Dense Interface Interface-Mode Operational-Status --------- -------------- ------------------ 1/0/1 Enabled Operational 1/0/3 Disabled Non-Operational Example 2: (Switch) #show ip pim PIM Mode Sparse Inter[...]

IP Multicast Commands 358 ProSafe Managed Switch show ip pim bsr-router This command displays the bootstrap router (BSR) information. The output includes elected BSR information and information about the locally configured candidate rendezvous point (RP) advertisement. Format show ip pim bsr-router [candidate | elected] Mode • Privileged EXEC •[...]

IP Multicast Commands 359 ProSafe Managed Switch show ip pim rp mapping This command displays the mappings for the PIM group to the active rendezvous points.. Format show ip pim rp mapping [<rp address> | candidate | static] Modes RP Address Group Address Group Mask Origin Expiry Time Example 1: (Switch) #show ip pim rp mapping 192.168.10.1 R[...]

IP Multicast Commands 360 ProSafe Managed Switch Group Mask 255.255.0.0 Origin Static Expiry Time (hh:mm:ss) NA Internet Group Message Protocol (IGMP) Commands This section describes the commands you use to view and configure IGMP settings. ip igmp This command sets the administrative mode of IGMP in the system to active. Default Format ip igmp Mod[...]

IP Multicast Commands 361 ProSafe Managed Switch ip igmp last-member-query-count This command sets the number of Group-Specific Queries sent before the router assumes that there are no local members on the interface. The range for < count> is 1 to 20. Format ip igmp last-member-query-count <count> Modes no ip igmp last-member-query-coun[...]

IP Multicast Commands 362 ProSafe Managed Switch no ip igmp query-interval This command resets the query interval for the specified interface to the default value. This is the frequency at which IGMP Host-Query packets are transmitted on this interface. Format no ip igmp query-interval Modes ip igmp query-max-response-time This command configures t[...]

IP Multicast Commands 363 ProSafe Managed Switch ip igmp startup-query-count This command sets the number of Queries sent out on startup, separated by the Startup Query Interval on the interface. The range for < count> is 1 to 20. Default Format ip igmp startup-query-count < count > Mode no ip igmp startup-query-count This command reset[...]

IGMP Admin Mode Interface Interface-Mode Operational-Sta tus IP Multicast Commands 364 ProSafe Managed Switch show ip igmp groups This command displays the registered multicast groups on the interface. If [detail] is specified this command displays the registered multicast groups on the interface in detail. Format show ip igmp groups < unit/slot[...]

IP Multicast Commands 365 ProSafe Managed Switch show ip igmp interface This command displays the IGMP information for the interface. Format show ip igmp interface < unit/slot/port > Modes • Privileged EXEC • User EXEC Interface IGMP Admin Mode Interface Mode IGMP Version Query Interval Query Max Response Time Robustness Startup Query Int[...]

IP Multicast Commands 366 ProSafe Managed Switch show ip igmp interface membership This command displays the list of interfaces that have registered in the multicast group. Format show ip igmp interface membership <multiipaddr> [detail] Mode Interface Interface IP State Group Compatibility Mode Source Filter Mode If you use the detail keyword[...]

Querier Status Querier IP Address Querier Up Time Querier Expiry Time Wrong Version Queries Number of Joins Number of Groups IP Multicast Commands 367 ProSafe Managed Switch IGMP Proxy Commands The IGMP Proxy is used by IGMP Router (IPv4 system) to enable the system to issue IGMP host messages on behalf of hosts that the system discovered through s[...]

IP Multicast Commands 368 ProSafe Managed Switch ip igmp-proxy unsolicit-rprt-interval This command sets the unsolicited report interval for the IGMP Proxy router. This command is valid only when you enable IGMP Proxy on the interface. The value of <interval> can be 1-260 seconds. Default Format ip igmp-proxy unsolicit-rprt-interval <inter[...]

IP Multicast Commands 369 ProSafe Managed Switch Example: The following example shows CLI display output for the command. (Switch) #show ip igmp-proxy Interface Index............................................. 1/0/1 Admin Mode................................................ Enable Operational Mode......................................... Enable V[...]

IP Multicast Commands 370 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (Switch) #show ip igmp-proxy interface Interface Index................................ 1/0/1 Ver Query Rcvd Report Rcvd Report Sent Leave Rcvd Leave Sent ------------------------------------------------------------------ 1 0 0 0[...]

IP Multicast Commands 371 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (Switch) #show ip igmp-proxy groups Interface Index................................ 1/0/1 Group Address Last Reporter Up Time Member State Filter Mode Sources ------------- -------------- ---------- ------------- ------------- -[...]

IP Multicast Commands 372 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (Switch) #show ip igmp-proxy groups Interface Index................................ 1/0/1 Group Address Last Reporter Up Time Member State Filter Mode Sources ------------- -------------- ----------- ------------ ------------ --[...]

373 7 7. IPv6 Commands This chapter describes the IPv6 commands available in the managed switch CLI. Note: Some commands described in this chapter require a license. For more information, see Licensing and Command Support on page 8. This chapter contains the following sections: • Tunnel Interface Commands • IPv6 Routing Commands • OSPFv3 Comm[...]

IPv6 Commands 374 ProSafe Managed Switch tunnel from the destination address of packets routed into the tunnel. To assign an IP address to the tunnel interface, see ip address on page 247 . To assign an IPv6 address to the tunnel interface, see ipv6 address on page 377. interface tunnel Use this command to enter the Interface Config mode for a tunn[...]

IPv6 Commands 375 ProSafe Managed Switch show interface tunnel This command displays the parameters related to tunnel such as tunnel mode, tunnel source address and tunnel destination address. Format show interface tunnel [<tunnel-id>] Mode If you do not specify a tunnel ID, the command shows the following information for each configured tunn[...]

IPv6 Commands 376 ProSafe Managed Switch advertisements and a value of 64 is sent in packets originated by the node. Note that this is not the same as configuring a value of 64. Default Format ipv6 hop-limit <hops> Mode no ipv6 hop-limit This command returns the unicast hop count to the default. Format no ipv6 hop-limit Mode ipv6 unicast-rout[...]

IPv6 Commands 377 ProSafe Managed Switch no ipv6 enable Use this command to disable IPv6 routing on an interface. Format no ipv6 enable Mode ipv6 address Use this command to configure an IPv6 address on an interface, including tunnel and loopback interfaces, and to enable IPv6 processing on this interface. You can assign multiple globally reachable[...]

IPv6 Commands 378 ProSafe Managed Switch ipv6 address autoconfig This command is used to enable stateless address autoconfiguration capability. Note: When unicast-routing is enabled, autoconfig mode doesn’t work. Format ipv6 address autoconfig Mode ipv6 address autoconfig This command disables the stateless autoconfiguration. Format no ipv6 addre[...]

IPv6 Commands 379 ProSafe Managed Switch using a link-local address as the next hop. A route with a preference of 255 cannot be used to forward traffic. Default Format ipv6 route <ipv6-prefix>/<prefix_length> {<next-hop-address> | Null0 | interface {<unit/slot/port> | tunnel <tunnel_id>} <next-hop-address>} [<[...]

IPv6 Commands 380 ProSafe Managed Switch ipv6 mtu This command sets the maximum transmission unit (MTU) size, in bytes, of IPv6 packets on an interface. This command replaces the default or link MTU with a new MTU value. Note: The default MTU value for a tunnel interface is 1480. You cannot change this value . no ipv6 mtu This command resets maximu[...]

IPv6 Commands 381 ProSafe Managed Switch ipv6 nd managed-config-flag This command sets the “managed address configuration” flag in router advertisements. When the value is true, end nodes use DHCPv6. When the value is false, end nodes automatically configure addresses. Default Format ipv6 nd managed-config-flag Mode no ipv6 nd managed-config-fl[...]

IPv6 Commands 382 ProSafe Managed Switch no ipv6 nd other-config-flag This command resets the “other stateful configuration” flag back to its default value in router advertisements sent from the interface. Format no ipv6 nd other-config-flag Mode ipv6 nd ra-interval This command sets the transmission interval between router advertisements. Defa[...]

IPv6 Commands 383 ProSafe Managed Switch ipv6 nd reachable-time This command sets the router advertisement time to consider a neighbor reachable after neighbor discovery confirmation. Reachable time is specified in milliseconds. A value of zero means the time is unspecified by the router. Default Format ipv6 nd reachable-time <0–3600000> Mo[...]

IPv6 Commands 384 ProSafe Managed Switch ipv6 nd router-preference Format no ipv6 router-preference Mode This command will set the router preference to default. ipv6 unreachables Use this command to enable the generation of ICMPv6 Destination Unreachable messages. By default, the generation of ICMPv6 Destination Unreachable messages is enabled. Def[...]

IPv6 Commands 385 ProSafe Managed Switch no ipv6 icmp error-interval Use the no form of the command to return burst-interval and burst-size to their default values. Format no ipv6 icmp error-interval Mode show ipv6 brief Use this command to display the IPv6 status of forwarding mode and IPv6 unicast routing mode. Format show ipv6 brief Mode IPv6 Fo[...]

IPv6 Commands 386 ProSafe Managed Switch show ipv6 interface Use this command to show the usability status of IPv6 interfaces and whether ICMPv6 Destination Unreachable messages may be sent. Format show ipv6 interface {brief | <unit/slot/port> |tunnel <0-7> | loopback <0-7>} Mode If you use the brief parameter, the following infor[...]

IPv6 Commands 387 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (Switch) #show ipv6 interface 1/0/1 Routing Mode................................... Disabled Administrative Mode............................ Enabled IPv6 Routing Operational Mode.................. Disabled Bandwidth.....................[...]

IPv6 Commands 388 ProSafe Managed Switch show ipv6 neighbor Use this command to display information about the IPv6 neighbors. Format show ipv6 neighbor Mode clear ipv6 neighbors Use this command to clear all entries IPv6 neighbor table or an entry on a specific interface. Use the <unit/slot/port> parameter to specify the interface. Format cle[...]

IPv6 Commands 389 ProSafe Managed Switch Note: If you use the connected keyword for <protocol> , the all option is not available because there are no best or non-best connected routes. The show ipv6 route command displays the routing tables in the following format: Codes: C - connected, S - static O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF E[...]

IPv6 Commands 390 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (Switch) #show ipv6 route IPv6 Routing Table - 3 entries Codes: C - connected, S - static O - OSPF Intra, OI - OSPF Inter, OE1 - OSPF Ext 1, OE2 - OSPF Ext 2 ON1 - OSPF NSSA Ext Type 1, ON2 - OSPF NSSA Ext Type 2 S 2001::/64 [10/0] dire[...]

IPv6 Commands 391 ProSafe Managed Switch show ipv6 route preferences Use this command to show the preference value associated with the type of route. Lower numbers have a greater preference. A route with a preference of 255 cannot be used to forward traffic. Format show ipv6 route preferences Mode Local Static OSPF Intra OSPF Inter OSPF External sh[...]

IPv6 Commands 392 ProSafe Managed Switch The following example shows CLI display output for the command. (switch) #show ipv6 route summary Connected Routes............................... 4 Static Routes.................................. 0 6To4 Routes.................................... 0 Alternate Routes The number of alternate routes currently in [...]

IPv6 Commands 393 ProSafe Managed Switch OSPF Routes.................................... 13 Intra Area Routes............................ 0 Inter Area Routes............................ 13 External Type-1 Routes....................... 0 External Type-2 Routes....................... 0 Reject Routes.................................. 0 Total routes...[...]

IPv6 Commands 394 ProSafe Managed Switch show ipv6 traffic Use this command to show traffic and statistics for IPv6 and ICMPv6. Specify a logical, loopback, or tunnel interface to view information about traffic on a specific interface. If you do not specify an interface, the command displays information about traffic on all interfaces. Format show [...]

IPv6 Commands 395 ProSafe Managed Switch Received Datagrams Discarded Other Number of input IPv6 datagrams for which no problems were encountered to prevent their continue processing, but which were discarded (e.g., for lack of buffer space). Note that this counter does not include datagrams discarded while awaiting re-assembly. Received Datagrams [...]

IPv6 Commands 396 ProSafe Managed Switch ICMPv6 Messages with errors Number of ICMP messages which the interface received but determined as having ICMP-specific errors (bad ICMP checksums, bad length, etc.). ICMPv6 Destination Unreachable Messages Number of ICMP Destination Unreachable messages received by the interface. ICMPv6 Messages Prohibited [...]

IPv6 Commands 397 ProSafe Managed Switch clear ipv6 route counters This command resets to zero the IPv6 routing table counters reported in show ipv6 route summary. The command resets only the event counters. Counters that report the current state of the routing table, such as the number of routes of each type, are not reset. Format clear ipv6 route[...]

IPv6 Commands 398 ProSafe Managed Switch clear ipv6 statistics Use this command to clear IPv6 statistics for all interfaces or for a specific interface, including loopback and tunnel interfaces. IPv6 statistics display in the output of the show ipv6 traffic command. If you do not specify an interface, the counters for all IPv6 traffic statistics re[...]

IPv6 Commands 399 ProSafe Managed Switch ipv6 ospf cost This command configures the cost on an OSPF interface. The < cost > parameter has a range of 1 to 65535. Default Format ipv6 ospf cost < 1-65535> Mode no ipv6 ospf cost This command configures the default cost on an OSPF interface. Format no ipv6 ospf cost Mode ipv6 ospf dead-inter[...]

IPv6 Commands 400 ProSafe Managed Switch no ipv6 ospf hello-interval This command sets the default OSPF hello interval for the specified interface. Format no ipv6 ospf hello-interval Mode ipv6 ospf mtu-ignore This command disables OSPF maximum transmission unit (MTU) mismatch detection. OSPF Database Description packets specify the size of the larg[...]

IPv6 Commands 401 ProSafe Managed Switch no ipv6 ospf network This command sets the interface type to the default value. Format no ipv6 ospf network {broadcast | point-to-point} Mode ipv6 ospf priority This command sets the OSPF priority for the specified router interface. The priority of the interface is a priority integer from 0 to 255. A value o[...]

IPv6 Commands 402 ProSafe Managed Switch ipv6 ospf transmit-delay This command sets the OSPF Transit Delay for the specified interface. The transmit delay is specified in seconds. In addition, it sets the estimated number of seconds it takes to transmit a link state update packet over this interface. Valid values for <seconds> range from 1 to[...]

IPv6 Commands 403 ProSafe Managed Switch no area nssa(OSPFv3) This command disables nssa from the specified area id. Format no area <areaid> nssa Mode area nssa default-info-originate (OSPFv3) This command configures the metric value and type for the default route advertised into the NSSA. The optional metric parameter specifies the metric of[...]

IPv6 Commands 404 ProSafe Managed Switch area nssa no-summary (OSPFv3) This command configures the NSSA so that summary LSAs are not advertised into the NSSA. Format area <areaid> nssa no-summary Mode no area nssa no-summary (OSPFv3) This command disables nssa from the summary LSAs. Format no area <areaid> nssa no-summary Mode area nssa[...]

IPv6 Commands 405 ProSafe Managed Switch no area nssa translator-stab-intv (OSPFv3) This command disables the nssa translator’s <stabilityinterval> from the specified area id. Format no area <areaid> nssa translator-stab-intv <stabilityinterval> Mode area range (OSPFv3) This command creates a specified area range for a specified[...]

IPv6 Commands 406 ProSafe Managed Switch area stub no-summary (OSPFv3) This command disables the import of Summary LSAs for the stub area identified by <areaid> . Default Format area <areaid> stub no-summary Mode no area stub no-summary(OSPFv3) This command sets the Summary LSA import mode to the default for the stub area identified by [...]

IPv6 Commands 407 ProSafe Managed Switch no area virtual-link dead-interval(OSPFv3) This command configures the default dead interval for the OSPF virtual interface on the virtual interface identified by <areaid> and <neighbor> . The <neighbor> parameter is the Router ID of the neighbor. Format no area <areaid> virtual-link [...]

IPv6 Commands 408 ProSafe Managed Switch no area virtual-link retransmit-interval(OSPFv3) This command configures the default retransmit interval for the OSPF virtual interface on the virtual interface identified by < areaid > and < neighbor > . The < neighbor > parameter is the Router ID of the neighbor. Format no area < areai[...]

IPv6 Commands 409 ProSafe Managed Switch no auto-cost reference-bandwidth (OSPFv3) Use this command to set the reference bandwidth to the default value. Format no auto-cost reference-bandwidth Mode clear ipv6 ospf Use this command to disable and re-enable OSPF. Format clear ipv6 ospf Mode clear ipv6 ospf configuration Use this command to reset the [...]

IPv6 Commands 410 ProSafe Managed Switch clear ipv6 ospf neighbor interface To drop adjacency with all neighbors on a specific interface, use the optional parameter [ unit/slot/port ]. To drop adjacency with a specific router ID on a specific interface, use the optional parameter [ neighbor-id ]. Format clear ipv6 ospf neighbor interface [ unit/slo[...]

IPv6 Commands 411 ProSafe Managed Switch no default-metric (OSPFv3) This command is used to set a default for the metric of distributed routes. Format no default-metric Mode distance ospf (OSPFv3) This command sets the route preference value of OSPF route types in the router. Lower route preference values are preferred when determining the best rou[...]

IPv6 Commands 412 ProSafe Managed Switch exit-overflow-interval (OSPFv3) This command configures the exit overflow interval for OSPF. It describes the number of seconds after entering Overflow state that a router will wait before attempting to leave the overflow state. This allows the router to again originate non-default AS-external-LSAs. When set[...]

IPv6 Commands 413 ProSafe Managed Switch maximum-paths (OSPFv3) This command sets the number of paths that OSPF can report for a given destination where maxpaths is platform dependent. Default Format maximum-paths <maxpaths> Mode no maximum-paths This command resets the number of paths that OSPF can report for a given destination back to its [...]

IPv6 Commands 414 ProSafe Managed Switch no passive-interface(OSPFv3) Use this command to set the interface or tunnel as non-passive. It overrides the global passive mode that is currently effective on the interface or tunnel. Format no passive-interface {< unit/slot/port > | tunnel < tunnel-id >} Mode redistribute (OSPFv3) This command[...]

IPv6 Commands 415 ProSafe Managed Switch trapflags (OSPFv3) Use this command to enable individual OSPF traps, enable a group of trap flags at a time, or enable all the trap flags at a time. The different groups of trapflags, and each group’s specific trapflags to enable or disable, are listed in Table 2, Trapflag Groups (OSPFv3) . Table 2. Trapfl[...]

IPv6 Commands 416 ProSafe Managed Switch • To enable all the flags, give the command as trapflags all . Default Format trapflags { all | errors {all | authentication-failure | bad-packet | config-error | virt- authentication-failure | virt-bad-packet | virt-config-error} | if-rx {all | if-rx-packet} | lsa {all | lsa-maxage | lsa-originate} | over[...]

IPv6 Commands 417 ProSafe Managed Switch Note: Some of the information below displays only if you enable OSPF and configure certain features. Term Definition Router ID A 32 bit integer in dotted decimal format identifying the router, about which information is displayed. This is a configured value. OSPF Admin Mode Shows whether the administrative m[...]

IPv6 Commands 418 ProSafe Managed Switch Maximum Number of Retransmit Entries The maximum number of LSAs that can be waiting for acknowledgment at any given time. Retransmit Entries High Water Mark The highest number of LSAs that have been waiting for acknowledgment. External LSDB Limit The maximum number of non-default AS-external-LSAs entries tha[...]

IPv6 Commands 419 ProSafe Managed Switch show ipv6 ospf abr This command displays the internal OSPFv3 routes to reach Area Border Routers (ABR). This command takes no options. Format show ipv6 ospf abr Modes • Privileged EXEC • User EXEC show ipv6 ospf area This command displays information about the area. The < areaid > identifies the OS[...]

IPv6 Commands 420 ProSafe Managed Switch The following OSPF NSSA specific information displays only if the area is configured as an NSSA. Import Summary LSAs Redistribute into NSSA Default Information Originate Default Metric Default Metric Type Translator Role Translator Stability Interval Translator State show ipv6 ospf asbr This command displays[...]

IPv6 Commands 421 ProSafe Managed Switch show ipv6 ospf database This command displays information about the link state database when OSPFv3 is enabled. If you do not enter any parameters, the command displays the LSA headers for all areas. Use the optional <areaid> parameter to display database information about a specific area. Use the othe[...]

IPv6 Commands 422 ProSafe Managed Switch show ipv6 ospf database database-summary Use this command to display the number of each type of LSA in the database and the total number of LSAs in the database. Format show ipv6 ospf database database-summary Modes • Privileged EXEC • User EXEC Router Network Inter-area Prefix Inter-area Router Type-7 E[...]

IPv6 Commands 423 ProSafe Managed Switch The following information only displays if OSPF is initialized on the interface: OSPF Interface Type State Designated Router Backup Designated Router Number of Link Events Metric Cost show ipv6 ospf interface brief This command displays brief information for the IFO object or virtual interface tables. Format[...]

IPv6 Commands 424 ProSafe Managed Switch show ipv6 ospf interface stats This command displays the statistics for a specific interface. The command only displays information if OSPF is enabled. Format show ipv6 ospf interface stats <unit/slot/port> Modes • Privileged EXEC • User EXEC Term Definition Interface Valid slot and port number sep[...]

IPv6 Commands 425 ProSafe Managed Switch See show ip ospf interface stats on page 315 for a sample output of the number of OSPF packets of each type sent and received on the interface. show ipv6 ospf neighbor This command displays information about OSPF neighbors. If you do not specify a neighbor IP address, the output displays summary information [...]

IPv6 Commands 426 ProSafe Managed Switch If you do not specify an IP address, a table with the following columns displays for all neighbors or the neighbor associated with the interface that you specify: Router ID Priority Intf ID Interface State • Down- initial state of the neighbor conversation - no recent information has been received from the[...]

IPv6 Commands 427 ProSafe Managed Switch show ipv6 ospf range This command displays information about the area ranges for the specified < areaid > . The < areaid > identifies the OSPF area whose ranges are being displayed. Format show ipv6 ospf range < areaid > Modes • Privileged EXEC • User EXEC show ipv6 ospf stub table This[...]

IPv6 Commands 428 ProSafe Managed Switch show ipv6 ospf virtual-link This command displays the OSPF Virtual Interface information for a specific area and neighbor. The < areaid > parameter identifies the area and the < neighbor > parameter identifies the neighbor’s Router ID. Format show ipv6 ospf virtual-link < areaid > < ne[...]

IPv6 Commands 429 ProSafe Managed Switch OSPFv3 Graceful Restart Commands The managed switch implementation of OSPFv3 supports graceful restart as specified in RFC 5187 and RFC 3623. Graceful restart works together with managed switch non-stop forwarding (nsf) to enable the hardware to continue forwarding IPv6 packets using OSPFv3 routes while a ba[...]

IPv6 Commands 430 ProSafe Managed Switch The grace LSA announcing the graceful restart includes the reason for the restart. Reasons 1 (software restart) and 2 (software reload/upgrade) are considered planned restarts. Reasons 0 (unknown) and 3 (switch to redundant control processor) are considered unplanned restarts. Default Format nsf helper [ pla[...]

IPv6 Commands 431 ProSafe Managed Switch no nsf [ietf] helper strict-lsa-checking (OSPFv3) This command allows OSPF to continue as a helpful neighbor in spite of topology changes. nsf restart-interval (OSPFv3) This command configures the length of the grace period on the restarting router. The grace period must be set long enough to allow the resta[...]

IPv6 Commands 432 ProSafe Managed Switch ipv6 dhcp server Use this command to configure DHCPv6 server functionality on an interface. The <pool-name> is the DHCPv6 pool containing stateless and/or prefix delegation parameters, rapid-commit is an option that allows for an abbreviated exchange between the client and server, and <pref-value>[...]

IPv6 Commands 433 ProSafe Managed Switch These pools are shared between multiple interfaces over which DHCPv6 server capabilities are configured. Format ipv6 dhcp pool <pool-name> Mode no ipv6 dhcp pool This command removes the specified DHCPv6 pool. Format no ipv6 dhcp pool <pool-name> Mode domain-name (IPv6) This command sets the DNS [...]

IPv6 Commands 434 ProSafe Managed Switch prefix-delegation (IPv6) Multiple IPv6 prefixes can be defined within a pool for distributing to specific DHCPv6 Prefix delegation clients. Prefix is the delegated IPv6 prefix. DUID is the client’s unique DUID value (Example: 00:01:00:09:f8:79:4e:00:04:76:73:43:76'). Name is 31 characters textual clie[...]

IPv6 Commands 435 ProSafe Managed Switch Term Definition DHCPv6 Solicit Packets Received Number of solicit received statistics. DHCPv6 Request Packets Received Number of request received statistics. DHCPv6 Confirm Packets Received Number of confirm received statistics. DHCPv6 Renew Packets Received Number of renew received statistics. DHCPv6 Rebind[...]

IPv6 Commands 436 ProSafe Managed Switch show ipv6 dhcp interface This command displays DHCPv6 information for all relevant interfaces or the specified interface. If you specify an interface, you can use the optional statistics parameter to view statistics for the specified interface. Format show ipv6 dhcp interface <unit/slot/port> [statisti[...]

IPv6 Commands 437 ProSafe Managed Switch show ipv6 dhcp pool This command displays configured DHCP pool. Format show ipv6 dhcp pool <pool-name> Mode DHCP Pool Name Client DUID Host Prefix/Prefix Length Preferred Lifetime Valid Lifetime DNS Server Address Domain Name show ipv6 dhcp binding This command displays configured DHCP pool. Format sho[...]

IPv6 Commands 438 ProSafe Managed Switch Valid Lifetime Valid lifetime in seconds for delegated prefix. Preferred Lifetime Preferred lifetime in seconds for delegated prefix. Term Definition[...]

439 8 8. IPv6 Multicast Commands This chapter describes the IPv6 multicast commands available in the managed switch CLI. Note: Some commands described in this chapter require a license. For more information, see Licensing and Command Support on page 8. This chapter contains the following sections: • IPv6 Multicast Forwarder Commands on page 439 ?[...]

IPv6 Multicast Commands 440 ProSafe Managed Switch show ipv6 mroute Use this command to show the mroute entries specific for IPv6. (This command is the IPv6 equivalent of the IPv4 show ip mcaste mroute command.) Format show ipv6 mroute {detail | summary} Modes • Privileged EXEC • User EXEC If you use the detail parameter, the command displays t[...]

IPv6 Multicast Commands 441 ProSafe Managed Switch show ipv6 mroute source This command displays the multicast configuration settings specific to IPv6 such as flags, timer settings, incoming and outgoing interfaces, RPF neighboring routers, and expiration times of all the entries in the multicast mroute table containing the given source IP address [...]

IPv6 Multicast Commands 442 ProSafe Managed Switch IPv6 PIM Commands This section describes the Protocol Independent Multicast (PIM) commands that support the PIM version of IPv6. ipv6 pim dense(Global Config) Use this command to administratively enable PIM-DM Multicast Routing Mode across the router (Global Config). Default Format ipv6 pim dense M[...]

IPv6 Multicast Commands 443 ProSafe Managed Switch ipv6 pim hello-interval Use this command to configure the PIM hello interval for the specified router interface. The hello-interval is specified in seconds and is in the range 10–18000. Default Format ipv6 pim hello-interval <10-18000> Mode no ipv6 pim hello-interval Use this command to set[...]

IPv6 Multicast Commands 444 ProSafe Managed Switch show ipv6 pim neighbor Use this command to display the PIM neighbor information for all interfaces or for the specified interface. Example: The following shows example CLI display output for the command. (Switch) #show ipv6 pim neighbor 0/1 Interface Neighbor Up Time Expiry Time Address (hh:mm:ss) [...]

IPv6 Multicast Commands 445 ProSafe Managed Switch (Switch) #show ipv6 pim interface 1/0/1 Interface...................................... 1/0/1 Mode........................................... Dense Hello Interval (secs).......................... 30 Join Prune Interval (secs)..................... 60 DR Priority.................................... 1[...]

hash-mask-length priority interval IPv6 Multicast Commands 446 ProSafe Managed Switch no ipv6 pim bsr-candidate Use this command to disable the router to announce its candidacy as a bootstrap router (BSR). Format no ipv6 pim bsr-candidate interface [ <unit/slot/port> | vlan <1-4093>] [hash-mask-length] [priority] Mode ipv6 pim dr-priori[...]

IPv6 Multicast Commands 447 ProSafe Managed Switch no ipv6 pim join-prune-interval Use this command to set the join/prune interval to the default value. Format no ipv6 pim join-prune-interval Mode ipv6 pim rp-address Use this command to statically configure the RP address for one or more multicast groups. The parameter < rp-address > is the I[...]

IPv6 Multicast Commands 448 ProSafe Managed Switch no ipv6 pim rp-candidate Use this command to disable the router to advertise itself as a PIM candidate rendezvous point (RP) to the bootstrap router (BSR). Format no ipv6 pim rp-candidate interface <unit/slot/port> <group-address> <group-mask> Mode ipv6 pim ssm Use this command to[...]

IPv6 Multicast Commands 449 ProSafe Managed Switch show ipv6 pim rp-hash Use this command to display which rendezvous point (RP) is being used for a specified group. Format show ipv6 pim rp-hash < group-address > Modes • Privileged EXEC • User EXEC RP Origin show ipv6 pim rp mapping Use this command to display all group-to-RP mappings of [...]

IPv6 Multicast Commands 450 ProSafe Managed Switch ipv6 mld router Use this command, in the administrative mode of the router, to enable MLD in the router. Default Format ipv6 mld router Mode • Global Config • Interface Config no ipv6 mld router Use this command, in the administrative mode of the router, to disable MLD in the router. Default Fo[...]

IPv6 Multicast Commands 451 ProSafe Managed Switch no ipv6 mld query-max-response-time This command resets the MLD query max response time for the interface to the default value. Format no ipv6 mld query-max-response-time Mode ipv6 mld last-member-query-interval Use this command to set the last member query interval for the MLD interface, which is [...]

IPv6 Multicast Commands 452 ProSafe Managed Switch show ipv6 mld groups Use this command to display information about multicast groups that MLD reported. The information is displayed only when MLD is enabled on at least one interface. If MLD was not enabled on even one interface, there is no group information to be displayed. Format show ipv6 mld g[...]

IPv6 Multicast Commands 453 ProSafe Managed Switch Example: The following shows examples of CLI display output for the commands. (Switch) #show ipv6 mld groups ? <group-address> Enter Group Address Info. <unit/slot/port> Enter interface in unit/slot/port format. (Switch) #show ipv6 mld groups 1/0/1 Group Address.........................[...]

IPv6 Multicast Commands 454 ProSafe Managed Switch The following information is displayed if the operational mode of the MLD interface is enabled. Querier Status Querier Address Querier Up Time Querier Expiry Time Wrong Version Queries Number of Joins Number of Leaves Number of Groups show ipv6 mld traffic Use this command to display MLD statistica[...]

IPv6 Multicast Commands 455 ProSafe Managed Switch IPv6 MLD-Proxy Commands MLD-Proxy is the IPv6 equivalent of IGMP-Proxy. MLD-Proxy commands allow you to configure the network device as well as to view device settings and statistics using either serial interface or telnet session. The operation of MLD-Proxy commands is the same as for IGMP-Proxy: [...]

IPv6 Multicast Commands 456 ProSafe Managed Switch ipv6 mld-proxy unsolicit-rprt-interval Use this command to set the unsolicited report interval for the MLD-Proxy router. This command is only valid when you enable MLD-Proxy on the interface. The value of < interval > is 1-260 seconds. Default 1 Format ipv6 mld-proxy unsolicit-rprt-interval &[...]

IPv6 Multicast Commands 457 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (Switch) #show ipv6 mld-proxy Interface Index............................................. 1/0/3 Admin Mode................................................ Enable Operational Mode......................................... Enabl[...]

IPv6 Multicast Commands 458 ProSafe Managed Switch Example: The following shows example CLI display output for the command. (Switch) #show ipv6 mld-proxy interface Interface Index................................ 1/0/1 Ver Query Rcvd Report Rcvd Report Sent Leave Rcvd Leave Sent ------------------------------------------------------------------ 1 2 [...]

IPv6 Multicast Commands 459 ProSafe Managed Switch ------------- -------------- ---------- ----------------- -------------- ------- FF1E::1 FE80::100:2.3 00:01:40 DELAY_MEMBER Exclude 2 FF1E::2 FE80::100:2.3 00:02:40 DELAY_MEMBER Include 1 FF1E::3 FE80::100:2.3 00:01:40 DELAY_MEMBER Exclude 0 FF1E::4 FE80::100:2.3 00:02:44 DELAY_MEMBER Include 4 sh[...]

IPv6 Multicast Commands 460 ProSafe Managed Switch 2001::2 -------- FF1E::2 FE80::100:2.3 243 DELAY_MEMBER Include 1 Group Source List Expiry Time ------------------ --------------- 3001::1 00:03:32 3002::2 00:03:32 FF1E::3 FE80::100:2.3 328 DELAY_MEMBER Exclude 0 FF1E::4 FE80::100:2.3 255 DELAY_MEMBER Include 4 Group Source List Expiry Time ------[...]

461 9 9. Quality of Service (QoS) Commands This chapter describes the Quality of Service (QoS) commands available in the managed switch CLI. This chapter contains the following sections: • Class of Service (CoS) Commands • Differentiated Services (DiffServ) Commands • DiffServ Class Commands • DiffServ Policy Commands • DiffServ Service C[...]

Quality of Service (QoS) Commands 462 ProSafe Managed Switch Note: Commands you issue in the Interface Config mode only affect a single interface. Commands you issue in the Global Config mode affect all interfaces. classofservice dot1p-mapping This command maps an 802.1p priority to an internal traffic class. The <userpriority> values can ran[...]

Quality of Service (QoS) Commands 463 ProSafe Managed Switch classofservice trust This command sets the class of service trust mode of an interface. You can set the mode to trust one of the Dot1p (802.1p), IP DSCP, or IP Precedence packet markings. You can also set the interface mode to untrusted. If you configure an interface to use Dot1p, the mod[...]

Quality of Service (QoS) Commands 464 ProSafe Managed Switch no cos-queue min-bandwidth This command restores the default for each queue's minimum bandwidth value. Format no cos-queue min-bandwidth Modes • Global Config • Interface Config cos-queue strict This command activates the strict priority scheduler mode for each specified queue. F[...]

Quality of Service (QoS) Commands 465 ProSafe Managed Switch no cos-queue random-detect Use this command to disable WRED and restore the default tail drop operation for the specified queues on all interfaces or one interface. Format cos-queue random-detect queue-id-1 [queue-id-2 … queue-id-n] Modes • Global Config • Interface Config random-de[...]

Quality of Service (QoS) Commands 466 ProSafe Managed Switch The last precedence applies to all non-TCP traffic. For example, in a 3-color system, four of each parameter specified: green TCP, yellow TCP, red TCP, and non-TCP, respectively. Format random-detect queue-parms queue-id-1 [queue-id-2 … queue-id-n] minthresh thresh-prec-1 … thresh-pre[...]

Quality of Service (QoS) Commands 467 ProSafe Managed Switch The following information is repeated for each user priority. User Priority Traffic Class show classofservice ip-precedence-mapping This command displays the current IP Precedence mapping to internal traffic classes for a specific interface. The unit/slot/port parameter is optional and is[...]

Quality of Service (QoS) Commands 468 ProSafe Managed Switch displays the port trust mode of the interface. If you do not specify an interface, the command displays the most recent global configuration settings. Format show classofservice trust [<unit/slot/port>] Mode Non-IP Traffic Class Untrusted Traffic Class show interfaces cos-queue This[...]

Quality of Service (QoS) Commands 469 ProSafe Managed Switch Differentiated Services (DiffServ) Commands This section describes the commands you use to configure QOS Differentiated Services (DiffServ). You configure DiffServ in several stages by specifying three DiffServ components: 1. Class a. Creating and deleting classes. b. Defining match crite[...]

Quality of Service (QoS) Commands 470 ProSafe Managed Switch diffserv This command sets the DiffServ operational mode to active. While disabled, the DiffServ configuration is retained and can be changed, but it is not activated. When enabled, DiffServ services are activated. Format diffserv Mode no diffserv This command sets the DiffServ operationa[...]

Quality of Service (QoS) Commands 471 ProSafe Managed Switch Note: The class-map-name default is reserved and must not be used. The class type of match-all indicates all of the individual match conditions must be true for a packet to be considered a member of the class. This command may be used without specifying a class type to enter the Class-Map[...]

Quality of Service (QoS) Commands 472 ProSafe Managed Switch match ethertype This command adds to the specified class definition a match condition based on the value of the ethertype. The <ethertype> value is specified as one of the following keywords: appletalk , arp , ibmsna , ipv4 , ipv6 , ipx , mplsmcast , mplsucast , netbios , novell , p[...]

Quality of Service (QoS) Commands 473 ProSafe Managed Switch In some cases, each removal of a refclass rule reduces the maximum number of available rules in the class definition by one. no match class-map This command removes from the specified class definition the set of match conditions defined for another class. The <refclassname> is the n[...]

Quality of Service (QoS) Commands 474 ProSafe Managed Switch match destination-address mac This command adds to the specified class definition a match condition based on the destination MAC address of a packet. The <macaddr> parameter is any layer 2 MAC address formatted as six, two-digit hexadecimal numbers separated by colons (e.g., 00:11:2[...]

Quality of Service (QoS) Commands 475 ProSafe Managed Switch To specify the match condition using a numeric notation, one layer 4 port number is required. The port number is an integer from 0 to 65535. Default Format match dstl4port {<portkey> | <0-65535>} Mode match ip dscp This command adds to the specified class definition a match co[...]

Quality of Service (QoS) Commands 476 ProSafe Managed Switch match ip tos This command adds to the specified class definition a match condition based on the value of the IP TOS field in a packet, which is defined as all eight bits of the Service Type octet in the IP header. The value of <tosbits> is a two-digit hexadecimal number from 00 to f[...]

Quality of Service (QoS) Commands 477 ProSafe Managed Switch Note: This command does not validate the protocol number value against the current list defined by IANA. match source-address mac This command adds to the specified class definition a match condition based on the source MAC address of a packet. The <address > parameter is any layer [...]

Quality of Service (QoS) Commands 478 ProSafe Managed Switch match srcl4port This command adds to the specified class definition a match condition based on the source layer 4 port of a packet using a single keyword or numeric notation. To specify the match condition as a single keyword notation, the value for <portkey> is one of the supported[...]

Quality of Service (QoS) Commands 479 ProSafe Managed Switch DiffServ Policy Commands Use the DiffServ policy commands to specify traffic conditioning actions, such as policing and marking, to apply to traffic classes Use the policy commands to associate a traffic class that you define by using the class command set with one or more QoS policy attr[...]

Quality of Service (QoS) Commands 480 ProSafe Managed Switch mirror This command specifies that all incoming packets for the associated traffic stream are copied to a specific egress interface (physical port or LAG). Format mirror <unit/slot/port> Mode Incompatibilities redirect This command specifies that all incoming packets for the associa[...]

Quality of Service (QoS) Commands 481 ProSafe Managed Switch Note: The CLI mode is changed to Policy-Class-Map Config when this command is successfully executed. no class This command deletes the instance of a particular class and its defined treatment from the specified policy. <classname> is the names of an existing DiffServ class. Note: Th[...]

Quality of Service (QoS) Commands 482 ProSafe Managed Switch mark ip-dscp This command marks all packets for the associated traffic stream with the specified IP DSCP value. The <dscpval> value is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, [...]

Quality of Service (QoS) Commands 483 ProSafe Managed Switch For set-dscp-transmit, a <dscpval> value is required and is specified as either an integer from 0 to 63, or symbolically through one of the following keywords: af11, af12, af13, af21, af22, af23, af31, af32, af33, af41, af42, af43, be, cs0, cs1, cs2, cs3, cs4, cs5, cs6, cs7, ef. For[...]

Quality of Service (QoS) Commands 484 ProSafe Managed Switch no policy-map This command eliminates an existing DiffServ policy. The <policyname> parameter is the name of an existing DiffServ policy. This command may be issued at any time. If the policy is currently referenced by one or more interface service attachments, this delete attempt f[...]

Quality of Service (QoS) Commands 485 ProSafe Managed Switch Note: This command fails if any attributes within the policy definition exceed the capabilities of the interface. Once a policy is successfully attached to an interface, any attempt to change the policy definition, that would result in a violation of the interface capabilities, causes the[...]

Quality of Service (QoS) Commands 486 ProSafe Managed Switch show class-map This command displays all configuration information for the specified class. The <class-name> is the name of an existing DiffServ class. Format show class-map <class-name> Modes • Privileged EXEC • User EXEC If the class-name is specified the following field[...]

DiffServ Admin mode Class Table Size Current /Max Class Rule Table Size Current /Max Policy Table Size Current /Max Policy Instance Table Size Current /Max Policy Attribute Table Size Current /Max Service Table Size Current /Max Quality of Service (QoS) Commands 487 ProSafe Managed Switch show policy-map This command displays all configuration info[...]

Quality of Service (QoS) Commands 488 ProSafe Managed Switch If the Policy Name is not specified this command displays a list of all defined DiffServ policies. The following fields are displayed: Conform Action The current setting for the action taken on a packet considered to conform to the policing parameters. This is not displayed if policing is[...]

Quality of Service (QoS) Commands 489 ProSafe Managed Switch show diffserv service This command displays policy service information for the specified interface and direction. The <unit/slot/port> parameter specifies a valid unit/slot/port number for the system. Format show diffserv service <unit/slot/port> [in | out] Mode DiffServ Admin[...]

Quality of Service (QoS) Commands 490 ProSafe Managed Switch show policy-map interface This command displays policy-oriented statistics information for the specified interface and direction. The <unit/slot/port> parameter specifies a valid interface for the system. Note: This command is only allowed while the DiffServ administrative mode is e[...]

Quality of Service (QoS) Commands 491 ProSafe Managed Switch The following information is repeated for each interface and direction (only those interfaces configured with an attached policy are shown): Interface Operational Status Policy Name MAC Access Control List (ACL) Commands This section describes the commands you use to configure MAC ACL set[...]

Quality of Service (QoS) Commands 492 ProSafe Managed Switch no mac access-list extended This command deletes a MAC ACL identified by <name> from the system. Format no mac access-list extended <name> Mode mac access-list extended rename This command changes the name of a MAC Access Control List (ACL). The <name> parameter is the n[...]

Quality of Service (QoS) Commands 493 ProSafe Managed Switch VLAN, then the ACL rule is applied immediately. If a time range withspecified name exists and the MAC ACL containing this ACL rule is applied to aninterface or bound to a VLAN, then the ACL rule is applied when the time-range withspecified name becomes active. The ACL rule is removed when[...]

Quality of Service (QoS) Commands 494 ProSafe Managed Switch mac access-group This command either attaches a specific MAC Access Control List (ACL) identified by <name> to an interface, or associates it with a VLAN ID, in a given direction. The <name> parameter must be the name of an existing MAC ACL. An optional sequence number may be [...]

Quality of Service (QoS) Commands 495 ProSafe Managed Switch show mac access-lists This command displays a MAC access list and all of the rules that are defined for the MAC ACL. Use the [name] parameter to identify a specific MAC ACL to display. Format show mac access-lists [name] Mode Rule Number Action Source MAC Address Destination MAC Address E[...]

Quality of Service (QoS) Commands 496 ProSafe Managed Switch positions that are not used. In contrast, a wildcard mask has (0’s) in a bit position that must be checked. A ‘1’ in a bit position of the ACL mask indicates the corresponding bit can be ignored. access-list This command creates an IP Access Control List (ACL) that is identified by [...]

Quality of Service (QoS) Commands 497 ProSafe Managed Switch no access-list This command deletes an IP ACL that is identified by the parameter < accesslistnumber> from the system. The range for < accesslistnumber> 1-99 for standard access lists and 100-199 for extended access lists. Format no access-list <accesslistnumber> Mode ip[...]

Quality of Service (QoS) Commands 498 ProSafe Managed Switch no ip access-list This command deletes the IP ACL identified by <name> from the system. Format no ip access-list <name> Mode ip access-list rename This command changes the name of an IP Access Control List (ACL). The < name > parameter is the names of an existing IP ACL.[...]

Quality of Service (QoS) Commands 499 ProSafe Managed Switch command parameters are all optional, but the most frequently used parameters appear in the same relative order as shown in the command format. The assign-queue parameter allows specification of a particular hardware queue for handling traffic that matches this rule. The allowed <queue-[...]

Quality of Service (QoS) Commands 500 ProSafe Managed Switch no ip access-group This command removes a specified IP ACL from an interface. Default Format no ip access-group <accesslistnumber> {{ control-plane | in | out }|vlan < vlan-id > {in|out}} Mode • Interface Config • Global Config acl-trapflags This command enables the ACL tr[...]

Quality of Service (QoS) Commands 501 ProSafe Managed Switch show access-lists This command displays IP ACLs, IPv6 ACLs, and MAC access control lists information for a designated interface and direction. Format show access-lists interface <unit/slot/port> [in|out] Mode Term Definition Rule Number The number identifier for each rule that is de[...]

ACL Type ACL ID Sequence Number Quality of Service (QoS) Commands 502 ProSafe Managed Switch IPv6 Access Control List (ACL) Commands This section describes the commands you use to configure IPv6 ACL settings. IPv6 ACLs ensure that only authorized users have access to specific resources and block any unwarranted attempts to reach network resources. [...]

Quality of Service (QoS) Commands 503 ProSafe Managed Switch no ipv6 access-list This command deletes the IPv6 ACL identified by <name> from the system. Format no ipv6 access-list <name> Mode ipv6 access-list rename This command changes the name of an IPv6 ACL. The <name> parameter is the name of an existing IPv6 ACL. The <newn[...]

Quality of Service (QoS) Commands 504 ProSafe Managed Switch forwarded to the specified <unit/slot/port> . The assign-queue and redirect parameters are only valid for a permit rule. The time-range parameter allows imposing time limitation on the IPv6 ACL rule as defined by the parameter <time-range-name>. If a time range with the specif[...]

Quality of Service (QoS) Commands 505 ProSafe Managed Switch no ipv6 traffic-filter This command removes an IPv6 ACL identified by <name> from the interface(s) in a given direction. Format no ipv6 traffic-filter <name> {{ control-plane | in | out }|vlan < vlan-id > {in|out}} Modes • Global Config • Interface Config show ipv6 a[...]

Quality of Service (QoS) Commands 506 ProSafe Managed Switch Time Range Commands for Time-Based ACLs Time-based ACLs allow one or more rules within an ACL to be based on time. Each ACL rule within an ACL, except for the implicit deny all rule, can be configured to be active and operational only during a specific time period. The time range commands[...]

Quality of Service (QoS) Commands 507 ProSafe Managed Switch range is no longer in effect. The end time and date must be after the start time and date. If no end time and date are specified, the configuration statement is in effect indefinitely. Format absolute {[start time date ] [end time date ]} Mode no absolute Use this command to delete the ab[...]

Quality of Service (QoS) Commands 508 ProSafe Managed Switch periodic {start|end} time Use this command to configure the start/end time for the time-range. Format periodic {start|end} time Mode show time-range Use this command to display a time range and all the absolute/periodic time entries that are defined for the time range. Use the name parame[...]

Quality of Service (QoS) Commands 509 ProSafe Managed Switch Note: If voice VLAN and Auto-VoIP are enabled at the same time, then one of them is operational. If the connected phone is LLDP-MED capable, then voice VLAN has precedence over the Auto VoIP and Auto VoIP is operational if the phone does not support LLDP-MED. auto-voip {protocol-based | o[...]

Quality of Service (QoS) Commands 510 ProSafe Managed Switch auto-voip vlan This command is used to configure the global Auto VoIP VLAN id. The VLAN behavior is depend on the configured auto VoIP mode. Format auto-voip vlan <vlanid> Mode Default no auto-voip vlan This command is used to set the auto-voip VLAN to the default 2. Format no auto-[...]

Quality of Service (QoS) Commands 511 ProSafe Managed Switch Note: The administrator has to enable tagging on auto-VoIP-enabled ports to remark the voice data when it is egressed. Format auto-voip protocol-based {remark <remark-priority> | traffic-class <tc>} Mode • Global Config • Interface Config Default no auto-voip protocol-base[...]

Quality of Service (QoS) Commands 512 ProSafe Managed Switch show auto-voip oui-table This command lists all of the configured OUIs. Format show auto-voip oui-table Mode • Privileged EXEC • User EXEC OUI Status OUI Description Example: show auto-voip oui-table OUI Status Description --------- ---------- --------- 00:01:E3 Default SIEMENS 00:03:[...]

Quality of Service (QoS) Commands 513 ProSafe Managed Switch iscsi enable The iscsi enable Global Configuration mode command globally enables iSCSI awareness. Format iscsi enable Mode Default no iscsi enable This command is to disable iSCSI awareness use the no form of this command. When User uses this command, iSCSI resources will be released. For[...]

Quality of Service (QoS) Commands 514 ProSafe Managed Switch with the iSCSI session information acquired by snooping. Maximum of 16 TCP ports can be configured either bound to IP or not. Format iscsi target port tcp-port-1 [tcp-port-2.… tcp-port-8] [address ip-address] [name targetname] Mode Default tcp-port ip-address targetname no iscsi target [...]

Quality of Service (QoS) Commands 515 ProSafe Managed Switch setting for egress queues scheduling is Weighted Round Robin (WRR). The user may complete the QoS setting by configuring the relevant ports to work in other scheduling and queue management modes via the Class of Service settings. Depending on the platform, these choices may include strict[...]

time Quality of Service (QoS) Commands 516 ProSafe Managed Switch no iscsi aging time This command is to reset the aging time to the default. Format no iscsi aging time Mode show iscsi This command displays the iSCSI settings. Format show iscsi Mode • Privileged EXEC • User EXEC Example: The following example displays the iSCSI settings. Consol[...]

detailed Quality of Service (QoS) Commands 517 ProSafe Managed Switch Example: The following example displays the iSCSI sessions. Console # show iscsi sessions Target: iqn.1993-11.com.disk-vendor:diskarrays.sn.45678 ----------------------------------------------------------- Initiator: iqn.1992-04.com.os-vendor.plan9:cdrom.12 ISID: 11 Initiator: iq[...]

518 10 10. Power over Ethernet (PoE) Commands This chapter contains the following sections: • About PoE • PoE Commands About PoE Power over Ethernet describes a technology to pass electrical power safely along with data on existing Ethernet cabling. The PSE or power supply equipment is the device or switch that delivers electrical power, and th[...]

Power over Ethernet (PoE) Commands 519 ProSafe Managed Switch PoE Commands poe Use this command to enable the Power over Ethernet (PoE) functionality on a global basis or per interface. no poe Use this command to disable the Power over Ethernet (PoE) functionality on a global basis or per interface. poe detection Use this command to configure the d[...]

Power over Ethernet (PoE) Commands 520 ProSafe Managed Switch no poe detection Use this command to set the detection mode to the default on a global basis or per interface. poe high-power Use this command to switch a port from 802.3af mode to high-power mode. This mode is used to power up devices that require more power than the current IEEE 802.3a[...]

Power over Ethernet (PoE) Commands 521 ProSafe Managed Switch • user-defined —Allows you to define the maximum power to the port. This can be a value between 3 and 32 watts. no poe power limit Use this command to set the power limit type to the default. It also sets the maximum power limit to the default if the power limit type is user-defined.[...]

Power over Ethernet (PoE) Commands 522 ProSafe Managed Switch Dynamic Power Management Available power = 300 watts - 3 watts = 297 watts no poe power management Use this command to set the power management mode to the default. poe priority Use this command to configure the priority on a specific port. This is used for power management purposes. The[...]

Power over Ethernet (PoE) Commands 523 ProSafe Managed Switch used to reset the PoE port. The command can also reset the power-delivering ports. Note that this command takes effect only once after it is executed and cannot be saved across power cycles. poe timer schedule name Use this command to allow you to attach a timer schedule to a PoE port. Y[...]

Power over Ethernet (PoE) Commands 524 ProSafe Managed Switch no poe timer schedule name Use this command to detach the schedule from the port. poe usagethreshold Use this command to set a threshold (as a percentage) for the total amount of power that can be delivered by the switch. For example, if the switch can deliver up to a maximum of 300 watt[...]

Power over Ethernet (PoE) Commands 525 ProSafe Managed Switch no poe traps Use this command to disable logging the PoE traps. show poe Use this command to get global information regarding the PoE status. • ON—Indicates that the PoE controller is actively delivering power. • OFF—Indicates that the PoE controller is not delivering power. • [...]

Power over Ethernet (PoE) Commands 526 ProSafe Managed Switch Example: (switch) #show poe Firmware Version............................... 1.0.0.2 PSE Main Operational Status.................... ON Total Power (Main AC).......................... 380 Total Power (RPS).............................. 300 Total Power (PD) .............................. 2[...]

Power over Ethernet (PoE) Commands 527 ProSafe Managed Switch show poe port info Use this command to get information about the status of the PoE ports. You can display information based on each individual port or all the ports collectively. The command displays only PSE-capable ports. • Disabled—The PoE function is disabled on this port. • Se[...]

Power over Ethernet (PoE) Commands 528 ProSafe Managed Switch Intf Power Power Class Power Current Voltage Status Fault (W) (W) (mA) (volt) Status ------ ------- ----- ------- ------ ------- ------- ------------------ --------------- 1/0/33 No 18.0 2 04.400 84 53.3 Delivering Power No Error show poe pd Use this command to get information about the [...]

529 11 11. Utility Commands This chapter describes the utility commands available in the CLI. This chapter contains the following sections: • Auto Install Commands • Dual Image Commands • System Information and Statistics Commands • Logging Commands • Email Alerting and Mail Server Commands • System Utility and Clear Commands • Simple[...]

Utility Commands 530 ProSafe Managed Switch Auto Install Commands This section describes the Auto Install Commands. Auto Install is a software feature which provides for the configuration of a switch automatically when the device is initialized and no configuration file is found on the switch. The Auto Install process requires DHCP to be enabled by[...]

Utility Commands 531 ProSafe Managed Switch boot host auto-save This command is used to enable automatically saving the downloaded configuration on the switch. Default Format boot host auto-save Mode no boot host auto-save This command is used to disable automatically saving the downloaded configuration on the switch. Format no boot host auto-save [...]

Utility Commands 532 ProSafe Managed Switch no boot host retry-count This command is used to reset the number to the default. The default number is 3. Format no boot host retry-count Mode boot host dhcp This command is used to enable AutoInstall on the switch for the next reboot cycle. The command does not change the current behavior of AutroInstal[...]

Utility Commands 533 ProSafe Managed Switch delete This command deletes the supplied image file from the permanent storage. The image to be deleted must be a backup image. If this image is the active image, or if this image is activated, an error message displays. The optional <unit> parameter is valid only on Stacks. Error will be returned, [...]

Utility Commands 534 ProSafe Managed Switch update bootcode This command updates the bootcode (boot loader) on the switch. The bootcode is read from the active-image for subsequent reboots. The optional <unit> parameter is valid only on Stacks. Error will be returned, if this parameter is provided, on Standalone systems. For Stacking, the <[...]

File Line Task Id Code Time Unit Utility Commands 535 ProSafe Managed Switch Note: Event log information is retained across a switch reset. show hardware This command displays inventory information for the switch. Note: The show version command and the show hardware command display the same information. In future releases of the software, the show [...]

Utility Commands 536 ProSafe Managed Switch show interface This command displays a summary of statistics for a specific interface or a count of all CPU traffic based upon the argument. Format show interface {<unit/slot/port> | switchport} Mode The display parameters, when the argument is <unit/slot/port> , are as follows: Packets Receiv[...]

Utility Commands 537 ProSafe Managed Switch The display parameters, when the argument is “switchport” are as follows: Packets Received Without Error Broadcast Packets Received Packets Received With Error Packets Transmitted Without Error Broadcast Packets Transmitted Transmit Packet Errors Address Entries Currently In Use VLAN Entries Currently[...]

Utility Commands 538 ProSafe Managed Switch show interface ethernet This command displays detailed statistics for a specific interface or for all CPU traffic based upon the argument. Format show interface ethernet { unit/slot/port | switchport} Mode When you specify a value for unit/slot/port , the command displays the following information. Privil[...]

Utility Commands 539 ProSafe Managed Switch (cont) • Packets RX and TX 65–127 Octets - The total number of packets (including bad packets) received and transmitted that were between 65 and 127 octets in length inclusive (excluding framing bits but including FCS octets). • Packets RX and TX 128–255 Octets - The total number of packets (inclu[...]

Utility Commands 540 ProSafe Managed Switch Packets Received with MAC Errors • Total Packets Received with MAC Errors - The total number of inbound packets that contained errors preventing them from being deliverable to a higher-layer protocol. • Jabbers Received - The total number of packets received that were longer than 1518 octets (excludin[...]

Utility Commands 541 ProSafe Managed Switch Packets Transmitted Octets • Total Packets Transmitted (Octets) - The total number of octets of data (including those in bad packets) received on the network (excluding framing bits but including FCS octets). This object can be used as a reasonable estimate of Ethernet utilization. If greater precision [...]

Utility Commands 542 ProSafe Managed Switch If you use the switchport keyword, the following information appears. Transmit Discards • Total Transmit Packets Discards - The sum of single collision frames discarded, multiple collision frames discarded, and excessive frames discarded. • Single Collision Frames - A count of the number of successful[...]

Utility Commands 543 ProSafe Managed Switch Unicast Packets Received The number of subnetwork-unicast packets delivered to a higher-layer protocol. Multicast Packets Received The total number of packets received that were directed to a multicast address. Note that this number does not include packets directed to the broadcast address. Broadcast Pac[...]

Utility Commands 544 ProSafe Managed Switch show mac-addr-table This command displays the forwarding database entries. These entries are used by the transparent bridging function to determine how to forward a received frame. Enter all or no parameter to display the entire table. Enter a MAC Address and VLAN ID to display the table entry for the req[...]

Utility Commands 545 ProSafe Managed Switch The following information displays if you enter the count parameter: Dynamic Address count Static Address (User-defined) count Total MAC Addresses in use Total MAC Addresses available process cpu threshold Use this command to configure the CPU utilization thresholds. The Rising and Falling thresholds are [...]

Utility Commands 546 ProSafe Managed Switch Note: It is not necessarily the traffic to the CPU, but different tasks that keep the CPU busy. The following shows example CLI display output. (Switch) #show process cpu Memory Utilization Report status bytes ------ ---------- free 192980480 alloc 53409968 Task Utilization Report Task Utilization -------[...]

Utility Commands 547 ProSafe Managed Switch Total Rx Mid1 Alloc Failures 0 Total Rx High Alloc Failures 0 Total Tx Alloc Failures 0 show running-config Use this command to display or capture the current setting of different protocol packages supported on the switch. This command displays or captures commands with settings and configurations that di[...]

Utility Commands 548 ProSafe Managed Switch If some, but not all, of the flags in that group are enabled, the command displays trapflags <groupname> <flag-name> . Format show running-config [all | <scriptname>] Mode show running-config interface This command shows the current configuration on a particular interface. The interface [...]

Utility Commands 549 ProSafe Managed Switch • show port all • show isdp neighbors • show logging • show event log • show logging buffered • show trap log Format show tech-support Mode show tech-support techsupport This command without the techsupport parameter displays system and configuration information on the console. To generate the[...]

Utility Commands 550 ProSafe Managed Switch of < 5-48 > lines. The command terminal length 0 disables pagination and, as a result, the output of the show running-config command is displayed immediately. Default Format terminal length < 0 | 5-48 > Mode no terminal length Use this command to set the terminal length to the default value. F[...]

Utility Commands 551 ProSafe Managed Switch logging buffered This command enables logging to an in-memory log that keeps up to 128 logs. Default Format logging buffered Mode no logging buffered This command disables logging to in-memory log. Format no logging buffered Mode logging buffered wrap This command enables wrapping of in-memory logging whe[...]

Utility Commands 552 ProSafe Managed Switch no logging cli-command This command disables the CLI command Logging feature. Format no logging cli-command Mode logging console This command enables logging to the console. You can specify the <severitylevel> value as either an integer from 0 to 7 or symbolically through one of the following keywor[...]

Utility Commands 553 ProSafe Managed Switch logging host remove This command disables logging to host. See show logging hosts on page 554 for a list of host indexes. Format logging host remove <hostindex> Mode logging syslog This command enables syslog logging. The <portid> parameter is an integer with a range of 1-65535. Default Format[...]

Utility Commands 554 ProSafe Managed Switch show logging buffered This command displays buffered logging (system startup and system operation logs). Format show logging buffered Mode Buffered (In-Memory) Logging Buffered Logging Wrapping Behavior Buffered Log Count show logging hosts This command displays all configured logging hosts. Format show l[...]

Utility Commands 555 ProSafe Managed Switch show logging traplogs This command displays SNMP trap events and statistics. Format show logging traplogs Mode Number of Traps Since Last Reset Trap Log Capacity Number of Traps Since Log Last Viewed Log System Time Up Trap logging persistent Use this command to configure the Persistent logging for the sw[...]

Utility Commands 556 ProSafe Managed Switch no logging persistent Use this command to disable the persistent logging in the switch. Format no logging persistent Mode Email Alerting and Mail Server Commands logging email This command enables email alerting and sets the lowest severity level for which log messages are emailed. If you specify a severi[...]

Utility Commands 557 ProSafe Managed Switch no logging email urgent This command resets the urgent severity level to the default value. Format no logging email urgent Mode logging email message-type to-addr This command configures the email address to which messages are sent. The message types supported are urgent , non-urgent , and both . For each[...]

Utility Commands 558 ProSafe Managed Switch logging email message-type subject This command configures the subject line of the email for the specified type. Default For urgent messages: Urgent Log Messages For non-urgent messages: Non Urgent Log Messages Format logging email message-type {urgent |non-urgent |both} subject < subject > Mode no [...]

Utility Commands 559 ProSafe Managed Switch no logging traps This command resets the SNMP trap logging severity level to the default value. Format no logging traps Mode logging email test message-type This command sends an email to the SMTP server to test the email alerting function. Format logging email test message-type {urgent |non-urgent |both}[...]

Utility Commands 560 ProSafe Managed Switch show logging email statistics This command displays email alerting statistics. Format show logging email statistics Mode Email Alert Operation Status No of Email Failures No of Email Sent Time Since Last Email Sent clear logging email statistics This command resets the email alerting statistics. Format cl[...]

Utility Commands 561 ProSafe Managed Switch security Use this command to set the email alerting security protocol by enabling the switch to use TLS authentication with the SMTP Server. If the TLS mode is enabled on the switch but the SMTP sever does not support TLS mode, no email is sent to the SMTP server. Default Format security {tlsv1 | none} Mo[...]

No of mail servers configured Email Alert Mail Server Address Email Alert Mail Server Port Email Alert Security Protocol Email Alert Username Email Alert Password Utility Commands 562 ProSafe Managed Switch System Utility and Clear Commands This section describes the commands you use to help troubleshoot connectivity issues and to restore various c[...]

Utility Commands 563 ProSafe Managed Switch Using the options described below, you can specify the initial and maximum time-to-live (TTL) in probe packets, the maximum number of failures before termination, the number of probes sent for each TTL, and the size of each probe. ipaddr|hostname initTtl maxTtl maxFail interval count port size source The [...]

Utility Commands 564 ProSafe Managed Switch Hop Count = 6 Last TTL = 7 Test attempt = 19 Test Success = 18 traceroute ipv6 Use the traceroute command to discover the routes that packets actually take when traveling to their destination through the network on a hop-by-hop basis. The < ipv6-address|hostname > parameter must be a valid IPv6 addr[...]

Utility Commands 565 ProSafe Managed Switch clear counters This command clears the statistics for a specified <unit/slot/port>, for all the ports, or for the entire switch based upon the argument. Format clear counters {<unit/slot/port> | all} Mode clear igmpsnooping This command clears the tables managed by the IGMP Snooping function a[...]

Utility Commands 566 ProSafe Managed Switch enable password This command prompts you to change the Privileged EXEC password. Passwords are a maximum of 64 alphanumeric characters. The password is case sensitive. The option [encrypted] allows the administrator to transfer the enable password between devices without having to know the password. In th[...]

Utility Commands 567 ProSafe Managed Switch Using the options described below, you can specify the number and size of Echo Requests and the interval between Echo Requests. count interval size The following are examples of the CLI command. ping success: (Switch) #ping 10.254.2.160 count 3 interval 1 size 255 Pinging 10.254.2.160 with 255 bytes of da[...]

Utility Commands 568 ProSafe Managed Switch command, configure the switch for network (in-band) connection. The source and target devices must have the ping utility enabled and running on top of TCP/IP. The switch can be pinged from any IP workstation with which the switch is connected through the default VLAN (VLAN 1), as long as there is a physic[...]

Utility Commands 569 ProSafe Managed Switch quit This command closes the current telnet connection or resets the current serial connection. The system asks you whether to save configuration changes before quitting. Format quit Modes • Privileged EXEC • User EXEC reload This command resets the switch without powering it off. Reset means that all[...]

Utility Commands 570 ProSafe Managed Switch Note: < ip6address > is also a valid parameter for routing packages that support IPv6. For switches that support a USB device, the copy command can be used to transfer files from and to the USB device. The syntax for the USB file is: usb://<filename> . The USB device can be either a source or [...]

Utility Commands 571 ProSafe Managed Switch <url> nvram:script <destfilename> noval When you use this option, the copy command will not validate the downloaded script file. An example of the CLI command follows: (NETGEAR Switch) #copy tftp://1.1.1.1/file.scr nvram:script file.scr <url> nvram:sshkey-dsa Downloads an SSH key file. F[...]

Utility Commands 572 ProSafe Managed Switch write memory Use this command to save running configuration changes to NVRAM so that the changes you make will persist across a reboot. This command is the same as copy system:running config nvram:startup-config . Format write memory Mode Simple Network Time Protocol (SNTP) Commands This section describes[...]

Utility Commands 573 ProSafe Managed Switch no sntp client mode This command disables Simple Network Time Protocol (SNTP) client mode. Format no sntp client mode Mode sntp client port This command sets the SNTP client port id to a value from 1-65535. Default Format sntp client port <portid> Mode no sntp client port This command resets the SNT[...]

Utility Commands 574 ProSafe Managed Switch no sntp unicast client poll-timeout This command will reset the poll timeout for SNTP unicast clients to its default value. Format no sntp unicast client poll-timeout Mode sntp unicast client poll-retry This command will set the poll retry for SNTP unicast clients to a value from 0 to 10. Default Format s[...]

Utility Commands 575 ProSafe Managed Switch Mean Time (GMT). This may not be the time zone in which the switch is located. Use the clock timezone command to configure a time zone specifying the number of hours and optionally the number of minutes difference from UTC. To set the switch clock to UTC, use the no form of the command. Format clock timez[...]

Utility Commands 576 ProSafe Managed Switch • hh:mm—Time in 24-hour format in hours and minutes. (Range: hh:0-23, mm: 0-59) • offset—Number of minutes to add during the summertime. (Range:1-1440) • acronym—The acronym for the time zone to be displayed when summertime is in effect. (Range: Up to four characters) For example: (Switch)(Con[...]

Utility Commands 577 ProSafe Managed Switch no clock summer-time Use the no clock summer-time command to reset the summertime offset. For example: console(config)#no clock summer-time show sntp This command is used to display SNTP settings and status. Format show sntp Mode Last Update Time Last Unicast Attempt Time Last Attempt Status Broadcast Cou[...]

Utility Commands 578 ProSafe Managed Switch show sntp server This command is used to display SNTP server settings and configured servers. Format show sntp server Mode Server Host Address Server Type Server Stratum Server Reference ID Server Mode Server Maximum Entries Server Current Entries For each configured server: Host Address Address Type Prio[...]

Utility Commands 579 ProSafe Managed Switch show clock Use the show clock command in Privileged EXEC or User EXEC mode to display the time and date from the system clock. Use the show clock detail command to show the time zone and summertime configuration. DHCP Server Commands This section describes the commands you to configure the DHCP server set[...]

Utility Commands 580 ProSafe Managed Switch client-identifier This command specifies the unique identifier for a DHCP client. Unique-identifier is a valid notation in hexadecimal format. In some systems, such as Microsoft DHCP clients, the client identifier is required instead of hardware addresses. The unique-identifier is a concatenation of the m[...]

Utility Commands 581 ProSafe Managed Switch no default-router This command removes the default router list. Format no default-router Mode dns-server This command specifies the IP servers available to a DHCP client. Address parameters are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. Def[...]

Utility Commands 582 ProSafe Managed Switch host This command specifies the IP address and network mask for a manual binding to a DHCP client. Address and Mask are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. The prefix-length is an integer from 0 to 32. Default Format host <address[...]

Utility Commands 583 ProSafe Managed Switch no network This command removes the subnet number and mask. Format no network Mode bootfile The command specifies the name of the default boot image for a DHCP client. The <filename> specifies the boot image file. Format bootfile <filename> Mode no bootfile This command deletes the boot image [...]

Utility Commands 584 ProSafe Managed Switch One IP address is required, although one can specify up to eight addresses in one command line. Servers are listed in order of preference (address1 is the most preferred server, address2 is the next most preferred server, and so on). Default Format netbios-name-server <address> [<address2>...&[...]

Utility Commands 585 ProSafe Managed Switch no next-server This command removes the boot server list. Format no next-server Mode option The option command configures DHCP Server options. The < code > parameter specifies the DHCP option code and ranges from 1-254. The <ascii string> parameter specifies an NVT ASCII character string. ASCI[...]

Utility Commands 586 ProSafe Managed Switch no ip dhcp excluded-address This command removes the excluded IP addresses for a DHCP client. Low-address and high-address are valid IP addresses; each made up of four decimal bytes ranging from 0 to 255. IP address 0.0.0.0 is invalid. Format no ip dhcp excluded-address <lowaddress> [highaddress] Mo[...]

Utility Commands 587 ProSafe Managed Switch ip dhcp bootp automatic This command enables the allocation of the addresses to the bootp client. The addresses are from the automatic address pool. Default Format ip dhcp bootp automatic Mode no ip dhcp bootp automatic This command disables the allocation of the addresses to the bootp client. The address[...]

Utility Commands 588 ProSafe Managed Switch clear ip dhcp server statistics This command clears DHCP server statistics counters. Format clear ip dhcp server statistics Mode clear ip dhcp conflict The command is used to clear an address conflict from the DHCP Server database. The server detects conflicts using a ping. DHCP server clears all conflict[...]

Service DHCP Number of Ping Packets Conflict Logging BootP Automatic Utility Commands 589 ProSafe Managed Switch show ip dhcp pool configuration This command displays pool configuration. If all is specified, configuration for all the pools is displayed. Format show ip dhcp pool configuration {<name> | all} Modes • Privileged EXEC • User E[...]

Utility Commands 590 ProSafe Managed Switch show ip dhcp server statistics This command displays DHCP server statistics. Format show ip dhcp server statistics Modes • Privileged EXEC • User EXEC Automatic Bindings Expired Bindings Malformed Bindings Message Received: DHCP DISCOVER DHCP REQUEST DHCP DECLINE DHCP RELEASE DHCP INFORM Message Sent:[...]

IP address Reporting Host Hardware Address Detection Method Detection time Utility Commands 591 ProSafe Managed Switch DNS Client Commands These commands are used in the Domain Name System (DNS), an Internet directory service. DNS is how domain names are translated into IP addresses. When enabled, the DNS client provides a hostname lookup service t[...]

Utility Commands 592 ProSafe Managed Switch no ip domain name Use this command to remove the default domain name configured using the ip domain name command. Format no ip domain name Mode ip domain list Use this command to define a list of default domain names to complete unqualified names. By default, the list is empty. Each name must be no more t[...]

Utility Commands 593 ProSafe Managed Switch ip host Use this command to define static host name-to-address mapping in the host cache. < name > is host name. <i p address > is the IP address of the host. Default Format ip host < name > < ipaddress > Mode no ip host Use this command to remove the name-to-address mapping. Forma[...]

Utility Commands 594 ProSafe Managed Switch no ip domain retry Use this command to return to the default. Format no ip domain retry < number > Mode ip domain timeout Use this command to specify the amount of time to wait for a response to a DNS query. The parameter < seconds > specifies the time, in seconds, to wait for a response to a [...]

Utility Commands 595 ProSafe Managed Switch show hosts Use this command to display the default domain name, a list of name server hosts, the static and the cached list of host names and addresses < name > ranges from 1-255 characters. This command displays both IPv4 and IPv6 entries. Format show hosts [ name ] Mode Host Name Default Domain De[...]

Utility Commands 596 ProSafe Managed Switch internally allocated buffer area for export to a PC host for protocol analysis. Public domain packet analysis tools like Ethereal can be used to decode and review the packets in detail. Capturing can be performed in a variety of modes, either transmit-side only, receive-side only, or both. The number of p[...]

file remote line Utility Commands 597 ProSafe Managed Switch no capture Use this command to reset the capture mode to remote mode. Format no capture Mode capture remote port Use this command to configure file capture options. The command is persistent across a reboot cycle. Default Format capture remote port <port-id> Mode no capture remote p[...]

Utility Commands 598 ProSafe Managed Switch capture file size Use this command to configure file capture options. The command is persistent across a reboot cycle. The range is from 2 to 512 Kbytes. Default Format capture file size <file-size> Mode no capture file size Use this command to reset the file size to the default (512Kbytes). Format [...]

Utility Commands 599 ProSafe Managed Switch debug arp Use this command to enable ARP debug protocol messages. Default Format debug arp Mode no debug arp Use this command to disable ARP debug protocol messages. Format no debug arp Mode debug auto-voip Use this command to enable Auto VOIP debug messages. Use the optional parameters to trace H323, SCC[...]

Utility Commands 600 ProSafe Managed Switch has been enabled. The configuration of this command remains in effect for the life of the login session. The effect of this command is not persistent across resets. Default Format debug console Mode no debug console This command disables the display of “debug” trace output on the login session in whic[...]

Utility Commands 601 ProSafe Managed Switch no debug dot1x packet Use this command to disable dot1x packet debug trace. Format no debug dot1x Mode debug igmpsnooping packet This command enables tracing of IGMP Snooping packets received and transmitted by the switch. Default Format debug igmpsnooping packet Mode no debug igmpsnooping packet This com[...]

Utility Commands 602 ProSafe Managed Switch no debug igmpsnooping transmit This command disables tracing of transmitted IGMP snooping packets. Format no debug igmpsnooping transmit Mode debug igmpsnooping packet receive This command enables tracing of IGMP Snooping packets received by the switch. Snooping should be enabled on the device and the int[...]

Utility Commands 603 ProSafe Managed Switch no debug igmpsnooping receive This command disables tracing of received IGMP Snooping packets. Format no debug igmpsnooping receive Mode debug ip acl Use this command to enable debug of IP Protocol packets matching the ACL criteria. Default Format debug ip acl <acl Number> Mode no debug ip acl Use t[...]

Utility Commands 604 ProSafe Managed Switch information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console. Default Format debug ip dvmrp packet [receive|transmit] Mode no debug ip dvmrp packet Use this command to disable debug[...]

Utility Commands 605 ProSafe Managed Switch no debug ip mcache packet Use this command to disable debug tracing of MDATA packet reception and transmission. Format no debug ip mcache packet [receive|transmit] Mode debug ip pimdm packet Use this command to trace PIMDM packet reception and transmission. receive traces only received PIMDM packets and t[...]

Utility Commands 606 ProSafe Managed Switch debug ip vrrp Use this command to enable VRRP debug protocol messages. Default Format debug ip vrrp Mode no debug ip vrrp Use this command to disable VRRP debug protocol messages. Format no debug ip vrrp Mode debug ipv6 dhcp Use this command to display “debug” information about DHCPv6 client activitie[...]

Utility Commands 607 ProSafe Managed Switch no debug ipv6 mcache packet Use this command to disable debug tracing of MDATAv6 packet reception and transmission. Format no debug ipv6 mcache packet [receive|transmit] Mode debug ipv6 mld packet Use this command to trace MLDv6 packet reception and transmission. receive traces only received MLDv6 packets[...]

Utility Commands 608 ProSafe Managed Switch neither keyword is used in the command, then all PIMSMv6 packet traces are dumped. Vital information such as source address, destination address, control packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console. Default Format debug ipv6 pims[...]

Utility Commands 609 ProSafe Managed Switch packet type, packet length, and the interface on which the packet is received or transmitted is displayed on the console. Default Format debug mldsnooping packet [receive|transmit] Mode no debug mldsnooping packet Use this command to disable debug tracing of MLD snooping packet reception and transmission.[...]

Utility Commands 610 ProSafe Managed Switch The following parameters are displayed in the trace message: TX/RX Intf SrcIp DestIp AreaId Type The remaining fields in the trace are specific to the type of OSPF Packet. HELLO packet field definitions: Netmask DesignRouter Backup DB_DSCR packet field definitions: MTU Options Flags • I – Init • M ?[...]

Utility Commands 611 ProSafe Managed Switch LS_REQ packet field definitions. Length LS_UPD packet field definitions. Length LS_ACK packet field definitions. Length no debug ospf packet This command disables tracing of OSPF packets. Format no debug ospf packet Mode debug ipv6 ospfv3 packet Use this command to enable OSPFv3 packet debug trace. Defaul[...]

Utility Commands 612 ProSafe Managed Switch A sample output of the trace message is shown below. <15> JAN 01 00:21:22 192.168.17.29-1 SIM[181040176]: sim_debug.c(128) 20 % Pkt TX - Intf: 1/0/1(1), SRC_IP:10.50.50.2, DEST_IP:10.50.50.1, Type:ECHO_REQUEST <15> JAN 01 00:21:22 192.168.17.29-1 SIM[182813968]: sim_debug.c(82) 21 % Pkt RX - I[...]

Utility Commands 613 ProSafe Managed Switch Rip_Version: RIPv2 Packet_Type:RIP_RESPONSE ROUTE 1): Network: 10.1.1.0 Mask: 255.255.255.0 Metric: 1 ROUTE 2): Network: 40.1.0.0 Mask: 255.255.0.0 Metric: 1 ROUTE 3): Network: 10.50.50.0 Mask: 255.255.255.0 Metric: 1 ROUTE 4): Network: 41.1.0.0 Mask: 255.255.0.0 Metric: 1 ROUTE 5): Network:42.0.0.0 Mask:[...]

Utility Commands 614 ProSafe Managed Switch no debug sflow packet Use this command to disable sFlow debug packet trace. Format no debug sflow packet Mode debug spanning-tree bpdu This command enables tracing of spanning tree BPDUs received and transmitted by the switch. Default Format debug spanning-tree bpdu Mode no debug spanning-tree bpdu This c[...]

Utility Commands 615 ProSafe Managed Switch no debug spanning-tree bpdu receive This command disables tracing of received spanning tree BPDUs. Format no debug spanning-tree bpdu receive Mode debug spanning-tree bpdu transmit This command enables tracing of spanning tree BPDUs transmitted by the switch. Spanning tree should be enabled on the device [...]

Utility Commands 616 ProSafe Managed Switch no debug spanning-tree bpdu transmit This command disables tracing of transmitted spanning tree BPDUs. Format no debug spanning-tree bpdu transmit Mode debug aaa accounting This command is useful for debugging accounting configuration and functionality in User Manager. Format debug aaa accounting Mode no [...]

Utility Commands 617 ProSafe Managed Switch Cable Test Command The cable test feature enables you to determine the cable connection status on a selected port. Note: The cable test feature is supported only for copper cable. It is not supported for optical fiber cable. If the port has an active link while the cable test is run, the link can go down [...]

Utility Commands 618 ProSafe Managed Switch sflow receiver Use this command to configure the sFlow collector parameters (owner string, receiver timeout, max datagram size, IP address, and port). Format sflow receiver < rcvr_idx > owner < owner-string > [timeout < rcvr_timeout > | notimeout] max datagram < size > ip/ipv6 <[...]

Utility Commands 619 ProSafe Managed Switch sflow sampler A data source configured to collect flow samples is called a poller. Use this command to configure a new sFlow sampler instance for this data source if < rcvr_idx > is valid. Format sflow sampler {< rcvr-indx > | rate < sampling-rate > | maxheadersize < size >} Mode n[...]

Utility Commands 620 ProSafe Managed Switch no sflow poller Use this command to reset the sFlow poller instance to the default settings. Format no sflow poller {<rcvr-indx> | interval <poll-interval>} Mode show sflow agent The sFlow agent collects time-based sampling of network interface statistics and flow-based samples. These are sent[...]

Utility Commands 621 ProSafe Managed Switch show sflow pollers Use this command to display the sFlow polling instances created on the switch. Use “-” for range. Format show sflow pollers Mode show sflow receivers Use this command to display configuration information related to the sFlow receivers. Format show sflow receivers [<index>] Mod[...]

Utility Commands 622 ProSafe Managed Switch IP Address:.................................... 0.0.0.0 Address Type................................... 1 Port........................................... 6343 Datagram Version............................... 5 Maximum Datagram Size.......................... 1400 show sflow samplers Use this command to disp[...]

Utility Commands 623 ProSafe Managed Switch show license This command displays the license status. License Date indicates the date of the license. License Status indicates whether license is active or inactive. Format show license Mode Example: The following shows example CLI display output for the command. (Managed Switches) #show license License [...]

Utility Commands 624 ProSafe Managed Switch Note: This command takes effect only once after it is executed and cannot be saved across power cycles. Format ip address-conflict-detect run Mode show ip address-conflict This command displays the status information corresponding to the last detected address conflict. Address Conflict Detection Status La[...]

Utility Commands 625 ProSafe Managed Switch the DTP packets on the interface. Use blockudld to filter the UDLD packets on the interface. Use blockpagp to filter the PAGP packets on the interface. Use blocksstp to filter the SSTP packets on the interface. Format llpf {blockisdp | blockvtp | blockdtp | blockudld | blockpagp | blocksstp | blockall } M[...]

Utility Commands 626 ProSafe Managed Switch RFC 2819 • Group 1 - Statistics Contains cumulative traffic and error statistics. • Group 2 - History Generates reports from periodic traffic sampling that are useful for analyzing trends. This group includes History Control Group and Ethernet History Group. • Group 3 - Alarm Enables the definition [...]

Utility Commands 627 ProSafe Managed Switch rmon alarm This command sets the RMON alarm entry in the RMON alarm MIB group. Format rmon alarm alarm number variable sample interval sampling type rising-threshold value falling-threshold value startup rising/falling/rising-falling owner string Mode no rmon alarm This command deletes the rmon alarm entr[...]

Utility Commands 628 ProSafe Managed Switch no rmon hcalarm This command deletes the rmon hcalarm entry. Format no rmon hcalarm <alarm number> Mode rmon event This command sets the rmon event entry in the RMON event mib group. Format rmon event < event number > [description|log|owner|trap] Mode Parameter Description hcalarm alarm number[...]

• None • Log • SNMP Trap • Log and SNMP Trap Utility Commands 629 ProSafe Managed Switch no rmon event This command deletes the rmon event entry. Format no rmon event <event number> Mode rmon collection history This command sets the history control parameters of the RMON historyControl mib group. Format rmon collection history <ind[...]

Utility Commands 630 ProSafe Managed Switch show rmon events This command displays the entries in the RMON event table. Format show rmon events Mode Example: (Switch) # show rmon events Index Description Type Community Owner Last time sent ------------------------------------------------------------------------------- 1 test log public MIB 0 days 0[...]

Utility Commands 631 ProSafe Managed Switch show rmon statistics interface This command displays the RMON statistics for the given interface. Format show rmon statistics interface <unit/slot/port> Mode Example: (switch) # show rmon statistics interface 1/0/1 Interface: 1/0/1 Dropped: 0 Octets: 0 Packets: 0 Broadcast: 0 Multicast: 0 CRC Align [...]

Utility Commands 632 ProSafe Managed Switch no udld enable This command disables udld globally on the switch. Format no udld enable Mode udld message time This command configures the interval between UDLD probe messages on ports that are in the advertisement phase. The range is from 7 to 90 seconds. Default Format udld message time <interval>[...]

Utility Commands 633 ProSafe Managed Switch udld port This command selects the UDLD mode operating on this interface. If the keyword “aggressive” is not entered, the port operates in normal mode. Default Format udld port [aggressive] Mode udld reset This command resets all interfaces that have been shutdown by UDLD. Format udld reset Mode show [...]

Utility Commands 634 ProSafe Managed Switch UDLD Mode The UDLD mode configured on this interface. This is either “Normal” or “Aggressive.”. UDLD Status The status of the link as determined by UDLD. The options are: • “Undetermined” - UDLD has not collected enough information to determine the state of the port • “Not applicable” [...]

635 12 12. Management Commands This chapter describes the management commands available in the managed switch CLI. This chapter contains the following sections: • Configuring the Switch Management CPU • Network Interface Commands • Console Port Access Commands • Telnet Commands • Secure Shell (SSH) Commands • Management Security Command[...]

Management Commands 636 ProSafe Managed Switch Configuring the Switch Management CPU To manage the switch via the web GUI or telnet, an IP address needs to be assigned to the switch management CPU. Whereas there are CLI commands that can be used to do this, ezconfig simplifies the task. The tool is applicable to all NETGEAR 7000-series managed swit[...]

Management Commands 637 ProSafe Managed Switch The following is an example of an ezconfig session. NETGEAR EZ Configuration Utility -------------------------------- Hello and Welcome! This utility will walk you thru assigning the IP address for the switch management CPU. It will allow you to save the changes at the end. After the session, simply us[...]

Management Commands 638 ProSafe Managed Switch Network Interface Commands This section describes the commands you use to configure a logical interface for management access. To configure the management VLAN, see step on page 65. enable (Privileged EXEC access) Use this command to access the Privileged EXEC mode. From the Privileged EXEC mode, you c[...]

Management Commands 639 ProSafe Managed Switch A locally administered address must have bit 6 On (b'1') and bit 7 Off (b'0'). Format network mac-address <macaddr> Mode network mac-type Use this command to specify whether the switch uses the burned in MAC address or the locally-administered MAC address. Default Format netwo[...]

Management Commands 640 ProSafe Managed Switch the switch's network interface do not affect the configuration of the front panel ports through which traffic is switched or routed. The network interface is always considered to be up, whether or not any member ports are up; therefore, the show network command will always show “Interface Status[...]

Management Commands 641 ProSafe Managed Switch IPv6 Address/Length is ........................ 3099::210:18FF:FE82:337/64 IPv6 Default Router is ........................ FE80::204:76FF:FE73:423A Burned In MAC Address.......................... 00:10:18:82:03:37 Locally Administered MAC Address............... 00:00:00:00:00:00 MAC Address Type.......[...]

Management Commands 642 ProSafe Managed Switch no serial baudrate Use this command to set the communication rate of the terminal interface. Format no serial baudrate Mode serial timeout Use this command to specify the maximum connect time (in minutes) without console activity. A value of 0 indicates that a console can be connected indefinitely. The[...]

Management Commands 643 ProSafe Managed Switch enable authentication Use this command in line configuration mode to specify an authentication method list when the user accesses a higher privilege level in remote telnet or console. Format enable authentication {default | list-name } Mode no enable authentication Use this command to return to the def[...]

Management Commands 644 ProSafe Managed Switch ip telnet server enable Use this command to enable Telnet connections to the system and to enable the Telnet Server Admin Mode. This command opens the Telnet listening port. Default Format ip telnet server enable Mode no ip telnet server enable Use this command to disable Telnet access to the system an[...]

Management Commands 645 ProSafe Managed Switch no transport input telnet Use this command to prevent new Telnet sessions from being established. Format no transport input telnet Mode transport output telnet Use this command to regulate new outbound Telnet connections. If enabled, new outbound Telnet sessions can be established until the system reac[...]

Management Commands 646 ProSafe Managed Switch no session-limit Use this command to set the maximum number of simultaneous outbound Telnet sessions to the default value. Format no session-limit Mode session-timeout Use this command to set the Telnet session timeout value.The timeout value unit of time is minutes. Default Format session-timeout <[...]

Management Commands 647 ProSafe Managed Switch telnetcon timeout Use this command to set the Telnet connection session timeout value, in minutes. A session is active as long as the session has not been idle for the value set. The time is a decimal value from 1 to 160. Note: When you change the timeout value, the new value is applied to all active a[...]

Outbound Telnet Login Timeout Maximum Number of Outbound Telnet Sessions Allow New Outbound Telnet Sessions Management Commands 648 ProSafe Managed Switch show telnetcon Use this command to display the current inbound Telnet settings. In other words, these settings apply to Telnet connections initiated from a remote system to the switch. Format sho[...]

Management Commands 649 ProSafe Managed Switch ip ssh Use this command to enable SSH access to the system. (This command is the short form of the ip ssh server enable command.) Default Format ip ssh Mode ip ssh protocol Use this command to set or remove protocol levels (or versions) for SSH. Either SSH1 (1), SSH2 (2), or both SSH 1 and SSH 2 (1 and[...]

Management Commands 650 ProSafe Managed Switch no sshcon maxsessions Use this command to set the maximum number of allowed SSH connection sessions to the default value. Format no sshcon maxsessions Mode sshcon timeout Use this command to set the SSH connection session timeout value, in minutes. A session is active as long as the session has been id[...]

Management Commands 651 ProSafe Managed Switch Management Security Commands This section describes commands you use to generate keys and certificates, which you can do in addition to loading them as before. crypto certificate generate Use this command to generate self-signed certificate for HTTPS. The generate RSA key for SSL has a length of 1024 b[...]

Management Commands 652 ProSafe Managed Switch no crypto key generate rsa Use this command to delete the RSA key files from the device. Format no crypto key generate rsa Mode crypto key generate dsa Use this command to generate a DSA key pair for SSH. The new key files will overwrite any existing generated or downloaded DSA key files. Format crypto[...]

Management Commands 653 ProSafe Managed Switch no ip http server Use this command to disable access to the switch through the Web interface. When access is disabled, the user cannot login to the switch's Web server. Format no ip http server Mode ip http secure-server Use this command to enable the secure socket layer for secure HTTP. Default F[...]

Management Commands 654 ProSafe Managed Switch user will be forced to re-authenticate. This timer begins on initiation of the web session and is unaffected by the activity level of the connection. Format ip http session hard-timeout <0-168> Mode no ip http session hard-timeout Use this command to restore the hard timeout for un-secure HTTP se[...]

Management Commands 655 ProSafe Managed Switch ip http session maxsessions Use this command to limit the number of allowable un-secure HTTP sessions. Zero is the configurable minimum. Format ip http session maxsessions <0-16> Mode no ip http session maxsessions Use this command to restore the number of allowable un-secure HTTP sessions to the[...]

Management Commands 656 ProSafe Managed Switch no ip http secure-session maxsessions Use this command to restore the number of allowable secure HTTP sessions to the default value. Format no ip http secure-session maxsessions Mode ip http secure-session soft-timeout Use this command to configure the soft timeout for secure HTTP sessions in minutes. [...]

Management Commands 657 ProSafe Managed Switch ip https authentication Use this command to specify the authentication methods for http server users. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify [...]

Management Commands 658 ProSafe Managed Switch ip http secure-protocol Use this command to set protocol levels (versions). The protocol level can be set to TLS1, SSL3 or to both TLS1 and SSL3. Default Format ip http secure-protocol [SSL3] [TLS1] Mode show ip http Use this command to display the http settings for the switch. Format show ip http Mode[...]

Management Commands 659 ProSafe Managed Switch Access Commands Use the commands in this section to close remote connections or to view information about connections to the system. disconnect Use the disconnect command to close HTTP, HTTPS, Telnet or SSH sessions. Use all to close all active sessions, or use <session-id> to specify the session[...]

Management Commands 660 ProSafe Managed Switch username Use this command to add a new user to the local user database. The default privilege level is 1. Using the encrypted keyword allows the administrator to transfer local user passwords between devices without having to know the passwords. When the password parameter is used along with encrypted [...]

Management Commands 661 ProSafe Managed Switch username name nopassword Use this command to remove an existing user’s password (NULL password). Format username name nopassword [ Level Level ] Mode username <username> unlock Use this command to unlock a user’s account. Only a user with read/write access can re-activate a locked user accoun[...]

Management Commands 662 ProSafe Managed Switch username snmpv3 authentication Use this command to specify the authentication protocol to be used for the specified user. The valid authentication protocols are none , md5 or sha . If you specify md5 or sha , the login password is also used as the snmpv3 authentication password and therefore must be at[...]

Management Commands 663 ProSafe Managed Switch no username snmpv3 encryption Use this command to set the encryption protocol to none . The <username> is the login user name for which the specified encryption protocol will be used. Format no username snmpv3 encryption <username> Mode show users Use this command to display the configured [...]

Management Commands 664 ProSafe Managed Switch show users accounts detail This command displays the local user status with respect to user account lockout and password aging. It also includes information about Password strength and complexity. Format show users accounts detail Mode (Switch) #show users accounts detail UserName......................[...]

Login Time Username Protocol Location Management Commands 665 ProSafe Managed Switch passwords min-length Use this command to enforce a minimum password length for local users. The value also applies to the enable password. The valid range is 0-64. Default Format passwords min-length <0-64> Mode no passwords min-length Use this command to set[...]

Management Commands 666 ProSafe Managed Switch passwords aging Use this command to implement aging on passwords for local users. When a user’s password expires, the user will be prompted to change it before logging in again. The valid range is 1-365. The default is 0, or no aging. Default Format passwords aging <1-365> Mode no passwords agi[...]

Management Commands 667 ProSafe Managed Switch no passwords strength-check Use this command to disable the password strength-check. Format no passwords strength-check Mode passwords strength minimum uppercase-letters Use this command to enforce a minimum number of uppercase letters that a password should contain. The valid range is 0-16. The defaul[...]

Management Commands 668 ProSafe Managed Switch passwords strength minimum numeric-characters Use this command to enforce a minimum number of numeric characters that a password should contain. The valid range is 0-16. The default is 2. Minimum of 0 means no restriction on that set of characters. Format passwords strength minimum numeric-letters Mode[...]

Management Commands 669 ProSafe Managed Switch no passwords strength maximum consecutive-characters Use this command to reset the maximum number of consecutive characters to the default value. Format no passwords strength maximum consecutive-characters Mode passwords strength maximum repeated-characters Use this command to enforce a maximum number [...]

Management Commands 670 ProSafe Managed Switch passwords strength exclude-keyword Use this command to exclude the specified keyword while configuring the password. The password does not accept the keyword in any form (in between the string, case insensitive and reverse) as a substring. User can configure up to a maximum of 3 keywords. Format passwo[...]

Management Commands 671 ProSafe Managed Switch show passwords result Use this command to display the last password set result information. Format show passwords result Mode Last User Whose Password Is Set Password Strength Check Last Password Set Result aaa authentication login Use this command to set authentication at login. The default and option[...]

Management Commands 672 ProSafe Managed Switch list-name Character string used to name the list of authentication methods activated when a user logs in. Up to 12 characters. method1 [method2…] At least one from the following table: enable line local none radius tacacs Note: The local user database is checked. This has the same effect as the follo[...]

Management Commands 673 ProSafe Managed Switch Default Uses the listed authentication methods that follow this argument as the default list of methods when a user accesses a higher privilege level. list-name Character string used to name the list of authentication methods activated when a user accesses a higher privilege level. Up to 12 characters.[...]

Management Commands 674 ProSafe Managed Switch specified as an authentication method after radius, no authentication is used if the radius server is down. Format aaa authentication dot1x default method1 Mode method1: At least one from the following table: local none radius ias no aaa authentication dot1x Use this command to remove the authenticatio[...]

exec commands default list-name start-stop stop-only none method ( method1/method2 …) Management Commands 675 ProSafe Managed Switch no aaa accounting This command deletes the accounting method list. Format no aaa accounting {exec | commands} {list_name default} Mode accounting (Console/Telnet/SSH) This command applies the accounting method list [...]

Management Commands 676 ProSafe Managed Switch ip http/https accounting This command applies user exec accounting list to the line methods HTTP and HTTPs methods. Format ip {http| https} accounting exec {default| <listname>} Mode HTTP/HTTPS default list-name no ip http/https accounting exec This command deletes the authorization method list. [...]

Management Commands 677 ProSafe Managed Switch aaa authorization This command creates an authorization method list. This list is identified by “default” or a user-specified “list_name.” If “tacacs” is specified as the Authorization method, Authorization commands are notified to a TACACS+ server. If “none” is specified as the Authori[...]

Management Commands 678 ProSafe Managed Switch no authorization(console/telnet/ssh) This command is used to remove command authorization from a line config mode. Format no authorization {commands| exec} Mode • Line console • Line telnet • Line SSH show authorization methods This command displays the configured authorization method lists. Form[...]

Management Commands 679 ProSafe Managed Switch username, then the managed switch sends the username input as the domain-name(as entered by the user)username to the RADIUS server. • Domain disabled: In this case, the domain name is not included when the user-name is sent to the RADIUS server. Note: If the user domain is already provided by the us[...]

Management Commands 680 ProSafe Managed Switch no mac address-table multicast forbidden-unregistered vlan Use this command to restore the default. Format no mac address-table multicast forbidden-unregistered vlan Mode mac address-table multicast forward-unregistered vlan Use this command to enable forwarding unregistered multicast address (in other[...]

Management Commands 681 ProSafe Managed Switch same Multicast Group address within the max-response-time, only the first response is forwarded to the query and others are suppressed at the switch. Default Format set igmp report-suppression < 1-4093 > Mode no set igmp report-suppression Use this command to restore the system default. Format no[...]

Management Commands 682 ProSafe Managed Switch aaa ias-user username The Internal Authentication Server (IAS) database is a dedicated internal database used for local authentication of users for network access through the IEEE 802.1X feature. Use this command to add the specified user to the internal user database. This command also changes the mod[...]

password encrypted Management Commands 683 ProSafe Managed Switch no password(AAA IAS User Configuration) Use this command to remove a password for a user in the IAS database. Format no password Mode clear aaa ias-users Use this command to remove all users from the IAS database. Format clear aaa ias-users Mode show aaa ias-users Use this command to[...]

Management Commands 684 ProSafe Managed Switch snmp-server community Use this command to add (and name) a new SNMP community. A community <name> is a name associated with the switch and with a set of SNMP managers that manage it with a specified privileged level. The length of <name> can be up to 16 case-sensitive characters. Note: Comm[...]

Management Commands 685 ProSafe Managed Switch no snmp-server community ipaddr Use this command to set a client IP address for an SNMP community to 0.0.0.0. The name is the applicable community name. Format no snmp-server community ipaddr <name> Mode snmp-server community ipmask Use this command to set a client IP mask for an SNMP community. [...]

Management Commands 686 ProSafe Managed Switch no snmp-server community mode Use this command to deactivate an SNMP community. If the community is disabled, no SNMP requests using this community are accepted. In this case the SNMP manager associated with this community cannot manage the switch until the Status is changed back to Enable. Format no s[...]

Management Commands 687 ProSafe Managed Switch no snmp-server enable traps violation Use this command to disable sending new violation traps. Format no snmp-server enable traps violation Mode snmp-server enable traps Use this command to enable the Authentication Flag. Default Format snmp-server enable traps Mode no snmp-server enable traps Use this[...]

Management Commands 688 ProSafe Managed Switch snmp-server enable traps multiusers Use this command to enable Multiple User traps. When the traps are enabled, a Multiple User Trap is sent when a user logs in to the terminal interface (EIA 232 or Telnet) and there is an existing terminal interface session. Default Format snmp-server enable traps mul[...]

Management Commands 689 ProSafe Managed Switch Note: The <name> parameter does not need to be unique, however; the <name> and < ipaddr | hostname > pair must be unique. Multiple entries can exist with the same <name> , as long as they are associated with a different <ipaddr | hostname> . The reverse scenario is also ac[...]

Management Commands 690 ProSafe Managed Switch snmptrap ipaddr Use this command to assign an IP address to a specified community name. The maximum length of name is 16 case-sensitive alphanumeric characters. Note: IP addresses in the SNMP trap receiver table must be unique. If you make multiple entries using the same IP address, the first entry is [...]

Management Commands 691 ProSafe Managed Switch no snmp trap link-status Use this command to disable link status traps by interface. Note: This command is valid only when the Link Up/Down Flag is enabled. snmp trap link-status all Use this command to enable link status traps for all interfaces. Note: This command is valid only when the Link Up/Down [...]

Management Commands 692 ProSafe Managed Switch The SNMP agent of the switch complies with SNMP Versions 1, 2 or 3. For more information about the SNMP specification, see the SNMP RFCs. The SNMP agent sends traps through TCP/IP to an external SNMP manager based on the SNMP configuration (the trap receiver and other SNMP community parameters). Format[...]

Management Commands 693 ProSafe Managed Switch (Netgear Switch)#show snmptrap Community Name IpAddress IPv6 Address Snmp Version Mode Mytrap 0.0.0.0 2001::1 SNMPv2 Enable show trapflags show trapflags Use this command to display trap conditions. The command’s display shows all the enabled OSPFv2 and OSPFv3 trapflags. Configure which traps the swi[...]

Management Commands 694 ProSafe Managed Switch RADIUS Commands This section describes the commands you use to configure the switch to use a Remote Authentication Dial-In User Service (RADIUS) server on your network for authentication and accounting. authorization network radius Use this command to enable the switch to accept VLAN assignment by the [...]

Management Commands 695 ProSafe Managed Switch RADIUS client uses that IP address while sending NAS-IP-Address attribute in RADIUS communication. Format radius server attribute <4> [< ipaddr >] Mode no radius server attribute Use the no version of this command to disable the NAS-IP-Address attribute global parameter for RADIUS client. W[...]

Management Commands 696 ProSafe Managed Switch Note: To re-configure a RADIUS authentication server to use the default UDP <port> , set the <port> parameter to 1812. If you use the <acct> token, the command configures the IP address or hostname to use for the RADIUS accounting server. You can only configure one accounting server. [...]

Management Commands 697 ProSafe Managed Switch address or dns name of the previously configured RADIUS authentication / accounting server. Format no radius server host {auth | acct} { <ipaddr|dnsname> } Mode The following shows an example of the command. (Switch) (Config) #radius server host acct 192.168.37.60 (Switch) (Config) #radius server[...]

Management Commands 698 ProSafe Managed Switch The following shows an example of the CLI command. radius server key acct 10.240.4.10 encrypted <encrypt-string> radius server msgauth Use this command to enable the message authenticator attribute to be used for the specified RADIUS Authenticating server. Format radius server msgauth <ipaddr|[...]

Management Commands 699 ProSafe Managed Switch radius server retransmit Use this command to configure the global parameter for the RADIUS client that specifies the number of transmissions of the messages to be made before attempting the fall back server upon unsuccessful communication with the current RADIUS authenticating server. When the maximum [...]

Management Commands 700 ProSafe Managed Switch show radius Use this command to display the values configured for the global parameters of the RADIUS client. Format show radius Mode Number of Configured Authentication Servers Number of Configured Accounting Servers Number of Named Authentication Server Groups Number of Named Accounting Server Groups[...]

Management Commands 701 ProSafe Managed Switch show radius servers Use this command to display the summary and details of RADIUS authenticating servers configured for the RADIUS client. Format show radius servers [ { <ipaddr | dnsname> | name [<servername> ] } ] Mode The following shows example CLI display output for the command. (Switc[...]

Management Commands 702 ProSafe Managed Switch 192.168.37.201 Network2_RADIUS_Server 1813 Secondary 192.168.37.202 Network3_RADIUS_Server 1813 Primary 192.168.37.203 Network4_RADIUS_Server 1813 Secondary (Switch) #show radius servers name Current Host Address Server Name Type ------------------------ --------------------------------- ----------192.[...]

Management Commands 703 ProSafe Managed Switch The following shows example CLI display output for the command. (Switch) #show radius accounting name Host Address Server Name Port Secret Configured ----------------------- --------------------------------- -------- ----------- 192.168.37.200 Network1_RADIUS_Server 1813 Yes 192.168.37.201 Network2_RAD[...]

Management Commands 704 ProSafe Managed Switch The following shows example CLI display output for the command. (Switch) #show radius accounting statistics 192.168.37.200 RADIUS Accounting Server Name................. Default_RADIUS_Server Host Address.................................. 192.168.37.200 Round Trip Time............................... 0.[...]

Management Commands 705 ProSafe Managed Switch Requests...................................... 0 Retransmissions............................... 0 Responses..................................... 0 Malformed Responses........................... 0 Bad Authenticators............................ 0 Pending Requests.............................. 0 Timeouts.[...]

Management Commands 706 ProSafe Managed Switch The following shows example CLI display output for the command. (Switch) #show radius statistics 192.168.37.200 RADIUS Server Name............................ Default_RADIUS_Server Server Host Address........................... 192.168.37.200 Access Requests............................... 0.00 Access R[...]

Management Commands 707 ProSafe Managed Switch delivery and a shared key configured on the client and daemon server to encrypt all messages. debug tacacs packet Use the debug tacacs packet command to turn on TACACS+ packet debug. Default Format debug tacacs packet [receive | transmit] Mode no debug tacacs packet Use this command to turn off TACACS+[...]

Management Commands 708 ProSafe Managed Switch only. If you want to enter the key in encrypted format, enter the key along with the encrypted keyword. In the show running config command’s display, these secret keys are displayed in encrypted format. You cannot show these keys in plain text format. Format tacacs-server key [< key-string> | e[...]

Management Commands 709 ProSafe Managed Switch no tacacs-server source interface Use this command in Global Configuration mode to remove the global source interface (Source IP selection) for all TACACS+ communications between the TACACS+ client and the server. Format no tacacs-server source-interface Mode tacacs-server timeout Use the tacacs-server[...]

Management Commands 710 ProSafe Managed Switch port Use the port command in TACACS Configuration mode to specify a server port number. The server <port-number> range is 0 - 65535. Default Format port <port-number> Mode priority Use the priority command in TACACS Configuration mode to specify the order in which servers are used, where 0 [...]

Management Commands 711 ProSafe Managed Switch Configuration Scripting Commands Configuration Scripting allows you to generate text-formatted script files representing the current configuration of a system. You can upload these configuration script files to a PC or UNIX system and edit them. Then, you can download the edited files to the system and[...]

Management Commands 712 ProSafe Managed Switch hello hello script apply Use this command to apply the commands in the script to the switch. The <scriptname> parameter is the name of the script to apply. Format script apply <scriptname> Mode script delete Use this command to delete a specified script, where the <scriptname> paramet[...]

Management Commands 713 ProSafe Managed Switch script validate Use this command to validate a script file by parsing each line in the script file, where <scriptname> is the name of the script to validate.The validate option is intended to be used as a tool for script development. Validation identifies potential problems. It might not identify[...]

Management Commands 714 ProSafe Managed Switch set clibanner Use this command to add the CLI Banner. The banner message supports up to 2000 characters. Format set clibanner < line > Mode no set clibanner Use this command to remove the CLI Banner downloaded through TFTP. Format no set clibanner Mode Switch Database Management (SDM) Templates Y[...]

ipv4-routing dual-ipv4-and-ipv6 Management Commands 715 ProSafe Managed Switch no sdm prefer Use this command to return to the default template. Format no sdm prefer Mode sdm prefer (Mixed Stacking) Use this command to specify the SDM template to stack with the following switches. GSM7328S V2H1,GSM7352S V2H1,GSM7228PS V1H1,GSM7228PS V1H1 Format sdm[...]

Management Commands 716 ProSafe Managed Switch Use the optional keywords to list the scaling parameters of a specific template. Format show sdm prefer [dual-ipv4-and-ipv6 default | ipv4-routing {default | data-center} ] Mode ARP Entries IPv4 Unicast Routes IPv6 NDP Entries IPv6 Unicast Routes ECMP Next Hops IPv4 Multicast Routes IPv6 Multicast Rout[...]

Management Commands 717 ProSafe Managed Switch network ipv6 enable Use this command to enable IPv6 operation on the network port. Default Format network ipv6 enable Mode no network ipv6 enable Use this command to disable IPv6 operation on the network port. Format no network ipv6 enable Mode network ipv6 address Use this command to configure an IPv6[...]

Management Commands 718 ProSafe Managed Switch • Disable the dhcpv6 client protocol on the network port (with the dhcp option). Format no network ipv6 address { address/prefix-length [eui64] | autoconfig | dhcp} Mode network ipv6 gateway Use this command to configure IPv6 gateway (default routers) information for the network port. The gateway add[...]

Management Commands 719 ProSafe Managed Switch FE80::204:76FF:FE73:423A 00:04:76:73:42:3a Delay 447540 show network ipv6 dhcp statistics Use this command to display the statistics of the DHCPv6 client running on the network management interface. Format show network ipv6 dhcp statistics Mode • Privileged EXEC • User EXEC The following example sh[...]

Management Commands 720 ProSafe Managed Switch Total DHCPv6 Packets Received......................... 0 DHCPv6 Solicit Packets Transmitted.................... 0 DHCPv6 Request Packets Transmitted.................... 0 DHCPv6 Renew Packets Transmitted...................... 0 DHCPv6 Rebind Packets Transmitted..................... 0 DHCPv6 Release Pac[...]

721 13 13. Log Messages This chapter lists common log messages, along with information regarding the cause of each message. There is no specific action that can be taken per message. When there is a problem being diagnosed, a set of these messages in the event log, along with an understanding of the system configuration and details of the problem w[...]

Log Messages 722 ProSafe Managed Switch Core Table 3. BSP Log Messages Component Message Cause BSP Event(0xaaaaaaaa) Switch has restarted. BSP Starting code... BSP initialization complete, starting 7000 series application. Table 4. NIM Log Messages Component Message Cause NIM NIM: L7_ATTACH out of order for intIfNum(x) unit x slot x port x Interfac[...]

Log Messages 723 ProSafe Managed Switch Table 5. System Log Messages Component Message Cause SYSTEM Configuration file Switch CLI.cfg size is 0 (zero) bytes The configuration file could not be read. This message may occur on a system for which no configuration has ever been saved or for which configuration has been erased. SYSTEM could not separate[...]

Log Messages 724 ProSafe Managed Switch Utilities Table 6. Trap Mgr Log Message Component Message Cause Trap Mgr Link Up/Down: unit/slot/port An interface changed link state. Table 7. DHCP Filtering Log Messages Component Message Cause DHCP Filtering Unable to create r/w lock for DHCP Filtering Unable to create semaphore used for dhcp filtering con[...]

Log Messages 725 ProSafe Managed Switch Table 9. RADIUS Log Messages Component Message Cause RADIUS RADIUS: Invalid data length - xxx The RADIUS Client received an invalid message from the server. RADIUS RADIUS: Failed to send the request A problem communicating with the RADIUS server. RADIUS RADIUS: Failed to send all of the request A problem comm[...]

Log Messages 726 ProSafe Managed Switch Management Table 10. TACACS+ Log Messages Component Message Cause TACACS+ TACACS+: authentication error, no server to contact TACACS+ request needed, but no servers are configured. TACACS+ TACACS+: connection failed to server x.x.x.x TACACS+ request sent to server x.x.x.x but no response was received. TACACS+[...]

Log Messages 727 ProSafe Managed Switch Table 14. EmWeb Log Messages Component Message Cause EmWeb EMWEB (Telnet): Max number of Telnet login sessions exceeded A user attempted to connect via telnet when the maximum number of telnet sessions were already active. EmWeb EMWEB (SSH): Max number of SSH login sessions exceeded A user attempted to connec[...]

Log Messages 728 ProSafe Managed Switch Table 16. WEB Log Messages Component Message Cause WEB Max clients exceeded This message is shown when the maximum allowed java client connections to the switch is exceeded. WEB Error on send to sockfd XXXX, closing connection Failed to send data to the java clients through the socket. WEB # (XXXX) Form Submi[...]

Log Messages 729 ProSafe Managed Switch SSHD SSHD: Unknown UI event in message, event=XXXX Failed to dispatch the UI event to the appropriate SSHD function as it’s an invalid event. XXXX indicates the event to be dispatched. SSHD sshdApiCnfgrCommand: Failed calling sshdIssueCmd. Failed to send the message to the SSHD message queue Table 19. SSLT [...]

Log Messages 730 ProSafe Managed Switch Switching Table 20. User_Manager Log Messages Component Message Cause User_Manager User Login Failed for XXXX Failed to authenticate user login. XXXX indicates the username to be authenticated. User_Manager Access level for user XXXX could not be determined. Setting to READ_ONLY. Invalid access level specifie[...]

Log Messages 731 ProSafe Managed Switch Table 22. IP Subnet VLANS Log Messages Component Message Cause IPsubnet vlans ERROR vlanIpSubnetSubnetValid :Invalid subnet This occurs when an invalid pair of subnet and netmask has come from the CLI IPsubnet vlans IP Subnet Vlans: failed to save configuration This message appears when save configuration of [...]

Log Messages 732 ProSafe Managed Switch Mac based VLANS vlanMacVlanChangeCallback: Failed to add an entry This appears when a dtl fails to add an entry for a vlan add notify event. Mac based VLANS vlanMacVlanChangeCallback: Failed to delete an entry This appears when a dtl fails to delete an entry for an vlan delete notify event. Table 24. 802.1x L[...]

Log Messages 733 ProSafe Managed Switch IGMP Snooping Failed to set igmp mrouter mode %d for interface xxx on Vlan yyy Failed to set VLAN multicast router mode due to IGMP Snooping message queue being full IGMP Snooping snoopCnfgrInitPhase1Process: Error allocating small buffers Could not allocate buffers for small IGMP packets IGMP Snooping snoopC[...]

Log Messages 734 ProSafe Managed Switch Table 27. 802.3ad Log Messages Component Message Cause 802.3ad dot3adReceiveMachine: received default event %x Received a LAG PDU and the RX state machine is ignoring this LAGPDU 802.3ad dot3adNimEventCompletionCallback, dot3adNimEventCreateCompletionCallbac k: DOT3AD: notification failed for event(%d), intf([...]

Log Messages 735 ProSafe Managed Switch Table 32. 802.1Q Log Messages Component Message Cause 802.1Q dot1qIssueCmd: Unable to send message %d to dot1qMsgQueue for vlan %d - %d msgs in queue dot1qMsgQueue is full. 802.1Q dot1qVlanCreateProcess: Attempt to create a vlan with an invalid vlan id %d ; VLAN %d not in range, This accommodates for reserved[...]

Log Messages 736 ProSafe Managed Switch QoS Table 35. Protocol-based VLANs Log Messages Component Message Cause Protocol Based VLANs pbVlanCnfgrInitPhase2Process: Unable to register NIM callback Appears when nimRegisterIntfChange fails to register pbVlan for link state changes. Protocol Based VLANs pbVlanCnfgrInitPhase2Process: Unable to register p[...]

Log Messages 737 ProSafe Managed Switch Routing/IPv6 Routing Table 38. DiffServ Log Messages Component Message Cause DiffServ diffserv.c 165: diffServRestore Failed to reset DiffServ. Recommend resetting device While attempting to clear the running configuration an error was encountered in removing the current settings. This may lead to an inconsis[...]

Log Messages 738 ProSafe Managed Switch OSPFv2 Warning: OSPF LSDB is 90% full (22648 LSAs). OSPFv2 limits the number of Link State Advertisements (LSAs) that can be stored in the link state database (LSDB). When the database becomes 90 or 95 percent full, OSPFv2 logs this warning. The warning includes the current size of the database. OSPFv2 The nu[...]

Log Messages 739 ProSafe Managed Switch Table 42. Routing Table Manager Log Messages Component Message Cause Routing Table Manager RTO is full. Routing table contains 8000 best routes, 8000 total routes. The routing table manager, also called “RTO,” stores a limited number of best routes, based on hardware capacity. When the routing table becom[...]

Log Messages 740 ProSafe Managed Switch Multicast Table 45. RIP Log Message Component Message Cause RIP RIP : discard response from xxx via unexpected interface When RIP response is received with a source address not matching the incoming interface’s subnet. Table 46. DHCP6 Log Message Component Message Cause DHCP6 relay_to_server: Cannot relay t[...]

Log Messages 741 ProSafe Managed Switch Table 49. IGMP-Proxy Log Messages Component Message Cause IGMP-Proxy Error getting memory for igmp host group record When we are unable to allocate memory for the IGMP group record in the Host (Proxy) table IGMP-Proxy Error getting memory for source record When we are unable to allocate memory for the IGMP so[...]

Log Messages 742 ProSafe Managed Switch Stacking Table 51. PIM-DM Log Messages Component Message Cause PIM-DM Out of memory when creating xxx This message is logged when there is insufficient memory to accommodate a new neighbor/(S,G) Entry, Prune, Graft, Join etc. PIM-DM Error entry->ll_xxx LL creation error This message is logged when the SLL [...]

Log Messages 743 ProSafe Managed Switch Technologies Table 54. System General Error Messages Component Message Cause OS Invalid USP unit = x, slot = x, port =x A port was not able to be translated correctly during the receive. OS In hapiBroadSystemMacAddress call to 'bcm_l2_addr_add' - FAILED : x Failed to add an L2 address to the MAC tab[...]

Log Messages 744 ProSafe Managed Switch OS USL: A Trunk being created by bcmx already existed in USL Possible synchronization issue between the application, hardware, and sync layer OS USL: A Trunk being destroyed doesn't exist in USL Possible synchronization issue between the application, hardware, and sync layer. OS USL: A Trunk being set do[...]

Log Messages 745 ProSafe Managed Switch O/S Support OS USL: failed to sync L3 Route table on unit= x Could not synchronize unit x due to a transport failure or API issue on remote unit. A synchronization retry will be issued OS USL: failed to sync initiator table on unit=x Could not synchronize unit x due to a transport failure or API issue on remo[...]

Log Messages 746 ProSafe Managed Switch OSAPI osapiCleanupIf: NetIPGet During the call to remove the interface from the route table, the attempt to get an ipv4 interface address from the stack failed. OSAPI osapiCleanupIf: NetMaskGet During the call to remove the interface from the route table ,the attempt to get the ipv4 interface mask from the st[...]

747 14 14. Captive Portal Commands The Captive Portal feature is a software implementation that blocks clients from accessing the network until user verification has been established. Verification can be configured to allow access for both guest and authenticated users. Authenticated users must be validated against a database of authorized Captive [...]

Captive Portal Commands 748 ProSafe Managed Switch enable Use this command to globally enable captive portal. Default disabled Format enable Mode no enable Use this command to globally disable captive portal. http port Use this command to configure an additional HTTP port for captive portal to monitor. The valid range is from 0 to 65535. Default Fo[...]

Captive Portal Commands 749 ProSafe Managed Switch no https port Use this command to reset the HTTPs port to the default HTTPS port 443. Format no https port Mode authentication timeout Use this command to configure the authentication timeout. If the user does not enter valid credentials within this time limit, the authentication page needs to be s[...]

Captive Portal Commands 750 ProSafe Managed Switch Operational Status........................ Disabled Disable Reason............................ Administrator Disabled CP IP Address................. 1.2.3.4 show captive-portal status Use this command to report the status of all captive portal instances in the system. Format show captive-portal sta[...]

Captive Portal Commands 751 ProSafe Managed Switch Captive Portal Configuration Commands The commands in this section are related to captive portal configurations. configuration (Captive Portal) Use this command to enter the captive portal instance mode. The captive portal configuration identified by CP ID 1 is the default CP configuration. The sys[...]

Captive Portal Commands 752 ProSafe Managed Switch no name Use this command to remove a configuration name. Format no name Mode protocol Use this command to configure the protocol mode for a captive portal configuration. The default protocol is http. Default http Format protocol { http | https } Mode verification Use this command to configure the v[...]

Captive Portal Commands 753 ProSafe Managed Switch no group Use this command to reset the group number to the default. Default 1 Format no group < 1-10 > Mode redirect (Captive Portal) Use this command to enable the redirect mode for a captive portal configuration. Use the “no” form of this command to disable redirect mode. Default disabl[...]

Captive Portal Commands 754 ProSafe Managed Switch no max-bandwidth-down Use this command to reset the maximum rate to the default. Format no max-bandwidth-down Mode max-bandwidth-up Use this command to configure the maximum rate at which a client can send data into the network. The rate is in bits per seconds. 0 indicates limit not enforced. Defau[...]

Captive Portal Commands 755 ProSafe Managed Switch max-output-octets Use this command to configure the maximum number of octets the user is allowed to receive. After this limit has been reached the user will be disconnected. The number of octets is in bytes. 0 indicates limit not enforced Use the “no”. Default 0 Format max-output-octets <0-4[...]

Captive Portal Commands 756 ProSafe Managed Switch no session-timeout Use this command to reset the session timeout to the default. Format session-timeout <0-86400> Mode idle-timeout Use this command to configure the idle timeout for a captive portal configuration. 0 indicates timeout not enforced. After an idle session has been reached this,[...]

Captive Portal Commands 757 ProSafe Managed Switch interface (Captive Portal) Use this command to associate an interface with a captive portal configuration. Format interface <unit/slot/port> Mode no interface Use this command to remove an association with a captive portal configuration. Format no interface <unit/slot/port> Mode block U[...]

Captive Portal Commands 758 ProSafe Managed Switch Example (switch)#show captive-portal configuration 1 CP ID..................................... 1 CP Name................................... cp1 Operational Status........................ Disabled Disable Reason............................ Administrator Disabled Blocked Status......................[...]

Captive Portal Commands 759 ProSafe Managed Switch If the interface is specified. The following term will be displayed. Authenticated users Example (Switch)#show captive-portal configuration 1 interface CP ID..................................... 1 CP Name................................... cp1 Operational Block Interface Interface Description Statu[...]

Captive Portal Commands 760 ProSafe Managed Switch If the interface is specified, the following terms are displayed. Group Name Redirect URL Mode Redirect URL Session Timeout Idle Timeout Max Bandwidth Up Max Bandwidth Down Max Input Octets Max Output Octets Max Total Octets Example (switch)#show captive-portal configuration status CP ID CP Name Mo[...]

Captive Portal Commands 761 ProSafe Managed Switch show captive-portal configuration locales Use this command to display locales associated with a specific captive portal configuration. <1-10> is captive port ID. Format show captive-portal configuration <1-10> locales Mode Example (switch)#show captive-portal configuration 1 locales Loc[...]

Client MAC Address Client IP Address Protocol Verification Session Time Captive Portal Commands 762 ProSafe Managed Switch If the macaddr is specified, the following terms are displayed. CP ID CP Name Interface Interface Description User Name Example (switch)#show captive-portal client status Client MAC Address Client IP Address Protocol Verificati[...]

Captive Portal Commands 763 ProSafe Managed Switch show captive-portal client statistics Use this command to display the statistics for a specific captive portal client. The macaddr is client MAC address. Format show captive-portal client <macaddr> statistics Mode Client MAC address Bytes Received Bytes Transmitted Packets Received Packets Tr[...]

Captive Portal Commands 764 ProSafe Managed Switch If the interface is specified, the following terms are displayed. CP ID CP Name Protocol Verification Example (switch) #show captive-portal interface client status Client Client Intf Intf Description MAC Address IP Address ------ ----------------------------------- ----------------- ---------------[...]

Captive Portal Commands 765 ProSafe Managed Switch If the CP ID is specified, the following terms are displayed. Interface Description Example (switch)#show captive-portal configuration client status CP ID CP Name Client MAC Address Client IP Address Interface ----- ------- ------------------ ----------------- --------- 1 cp1 0002.BC00.1290 10.254.[...]

Captive Portal Commands 766 ProSafe Managed Switch Example (switch)#show captive-portal interface configuration status CP ID CP Name Interface Interface Description Type ----- ------------ --------- ---------------------------- -------- 1 Default 1/0/1 Unit: 1 Slot: 0 Port: 1 Gigabit Physical (switch) #show captive-portal interface configuration 1 [...]

Captive Portal Commands 767 ProSafe Managed Switch user name Use this command to modify the user name for a local captive portal user. <1-128> is the user ID and the name is the user name in the range of 1-32 characters. The local user must exist before you use this command. You can create the local user using user password first. Format user[...]

Captive Portal Commands 768 ProSafe Managed Switch user idle-timeout Use this command to set the session idle timeout value for a captive portal user. <1-128> is the user ID. The range of idle timeout is 0-900 seconds. 0 indicates use global configuration. Default 0 Format user <1-128> idle-timeout timeout Mode no user idle-timeout Use [...]

Captive Portal Commands 769 ProSafe Managed Switch no user max-bandwidth-up Use this command to reset the limit to the default. Format no user <1-128> max-bandwidth-up Mode user max-input-octets Use this command to limit the number of octets the user is allowed to transmit. After this limit has been reached the user will be disconnected. <[...]

Captive Portal Commands 770 ProSafe Managed Switch has been reached the user will be disconnected. <1-128> is the user ID. The range of octets is 0-4294967295. 0 indicates to use the global limit. Use the “no” form of this command to reset the limit to the default. Default 0 Format user <1-128> max-total-octets octets Mode no user m[...]

Captive Portal Commands 771 ProSafe Managed Switch Example (switch)#show captive-portal user Session Idle User ID User Name Timeout Timeout Group ID Group Name ------- -------------- -------- -------- -------- ----------- 1 user123 10 13 1 Default 2 user234 0 0 1 Default (switch)#show captive-portal user 1 User ID...................................[...]

Captive Portal Commands 772 ProSafe Managed Switch Captive Portal User Group Commands The following section describes captive portal user group commands. user group (Create) Use this command to create a user group. User group 1 is created by default and cannot be deleted. Default Format user group <1-10> Mode no user group Use this command to[...]

773 15 15. Command List {deny | permit} (IP ACL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 498 {deny | permit} (IPv6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 503 {deny | permit} (MAC ACL) . . . . . . . . . . . . [...]

Command List 774 ProSafe Managed Switch area virtual-link dead-interval (OSPF) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 289 area virtual-link dead-interval (OSPFv3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 406 area virtual-link hello-interval (OSPF) . . . . . . . [...]

Command List 775 ProSafe Managed Switch capture file size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 598 capture line wrap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 598 capture remote port . . . [...]

Command List 776 ProSafe Managed Switch clear logging buffered . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 564 clear logging email statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 560 clear mac-addr-table . . . . . . .[...]

Command List 777 ProSafe Managed Switch debug isdp packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229 debug lacp packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 608 debug mldsnooping packet . . . . .[...]

Command List 778 ProSafe Managed Switch dos-control tcpflag . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215 dos-control tcpflagseq . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 218 dos-control tcpfrag . . . . . . .[...]

Command List 779 ProSafe Managed Switch hostroutesaccept . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 333 http port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 748 https port . . . . . . . [...]

Command List 780 ProSafe Managed Switch ip http authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 654 ip http java . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 653 ip http secure-port . . . [...]

Command List 781 ProSafe Managed Switch ip ospf transmit-delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 300 ip pim (Interface Config) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 350 ip pim bsr-border . . . . . . . .[...]

Command List 782 ProSafe Managed Switch ipv6 icmp error-interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 384 ipv6 mld last-member-query-count . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 451 ipv6 mld last-member-query-interval . . . [...]

Command List 783 ProSafe Managed Switch isdp run . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 224 isdp timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225 key . . . . . . . [...]

Command List 784 ProSafe Managed Switch logging host remove . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 553 logging persistent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 555 logging syslog . . . . . . . . [...]

Command List 785 ProSafe Managed Switch max-output-octets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755 max-total-octets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 755 member . . . . . . . . . . . [...]

Command List 786 ProSafe Managed Switch no set mld querier query_interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188 no set mld querier timer expiry . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188 nsf . . . . . . . . . . . . . . . . . . . . [...]

Command List 787 ProSafe Managed Switch port lacptimeout (Interface Config) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133 port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 561 port-channel adminmode . . . [...]

Command List 788 ProSafe Managed Switch rmon event . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 628 rmon hcalarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 627 router ospf . . . . . . . [...]

Command List 789 ProSafe Managed Switch set mld maxresponse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183 set mld mcrtexpiretime . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183 set mld mrouter . . . . . . . . . . .[...]

Command List 790 ProSafe Managed Switch show dhcp lease . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 249 show diffserv . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 486 show diffserv service . . . [...]

Command List 791 ProSafe Managed Switch show ip dvmrp neighbor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 347 show ip dvmrp nexthop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 348 show ip dvmrp prune . . . . . . . . . .[...]

Command List 792 ProSafe Managed Switch show ip route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 257 show ip route ecmp-groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 259 show ip route preferences . . . . . [...]

Command List 793 ProSafe Managed Switch show ipv6 route . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 388 show ipv6 route ecmp-groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 390 show ipv6 route preferences . . . . . . [...]

Command List 794 ProSafe Managed Switch show mldsnooping mrouter vlan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186 show monitor session . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141 show mvr . . . . . . . . . . . . . . . . . [...]

Command List 795 ProSafe Managed Switch show sflow samplers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 622 show slot . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 show snmpcommunity . . . . [...]

Command List 796 ProSafe Managed Switch snmp trap link-status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 690 snmp trap link-status all . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 691 snmp-server . . . . . . . . . . . [...]

Command List 797 ProSafe Managed Switch sshcon maxsessions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 649 sshcon timeout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 650 stack . . . . . . . . . . . . . . [...]

Command List 798 ProSafe Managed Switch tunnel mode ipv6ip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374 tunnel source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 374 udld enable . . . . . . . . .[...]

Command List 799 ProSafe Managed Switch vlan tagging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 voice vlan (Global Config) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80 voice vlan (Interface Config) [...]